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MS. ALEXA O’BRIEN 
MUCKROCK NEWS 
DEPT MR 17650 
POST OFFICE BOX 55819 
BOSTON, MA 02205-5819 


FOIPA Request No.: 1329073-000 
Subject: Carnivore 


Dear Ms. O’Brien: 

Records responsive to your request were previously processed under the provisions of the Freedom 
of Information Act. Enclosed is one CD containing 605 pages of previously processed documents and a copy 
of the Explanation of Exemptions. Please be advised, these are the only copies of these documents located 
in our possession. The original copies of these documents could not be located for reprocessing. 

Additional records potentially responsive to your subject exist. The Federal Bureau of Investigation 
(FBI) has located approximately 1,594 pages total of records potentially responsive to the subject of your 
request. By DOJ regulation, the FBI notifies requesters when anticipated fees exceed $25.00. 

If all potentially responsive pages are released on CD, you will owe $40.00 in duplication fees (3 CDs 
at $15.00 each, less $5.00 credit for the first CD). Releases are made on CD unless otherwise requested. 
Each CD contains approximately 500 reviewed pages per release. The 500 page estimate is based on our 
business practice of processing complex cases in segments. 

Should you request that the release be made in paper, you will owe $79.70 based on a duplication 
fee of five cents per page. See 28 CFR §16.10 and 16.49. 

If you agree to receive all responsive material on CD, you will receive a $5.00 credit towards your first 
interim CD. As a result, we must notify you there will be a $25.00 charge when the second interim release is 
made in this case. At that time you will be billed for the $1 0.00 remaining from the $1 5.00 free of the first 
release, as well as the $15.00 duplication fee for the second release, for a total of $25.00. 

Please remember this is only an estimate, and some of the information may be withheld in full 
pursuant to FOIA/Privacy Act Exemptions(s). Also, some information may not be responsive to your subject. 
Thus, the actual charges could be less. 
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You may file an appeal by writing to the Director, Office of Information Policy (OIP), United States 
Department of Justice, Suite 11050, 1425 New York Avenue, NW, Washington, D.C. 20530-0001, or you 
may submit an appeal through OIP's FOIAonline portal by creating an account on the following web 
site: https://foiaonline.regulations.gov/foia/action/public/home . Your appeal must be postmarked or 
electronically transmitted within sixty (60) days from the date of this letter in order to be considered timely. If 
you submit your appeal by mail, both the letter and the envelope should be clearly marked “Freedom of 
Information Act Appeal.” Please cite the FOIPA Request Number assigned to your request so that it may be 
easily identified. 


Sincerely, 



David M. Flardy 
Section Chief, 
Record/Information 


Dissemination Section 
Records Management Division 



ADDITIONAL CARNIVORE DOCUMENTS 

FROM 

OFFICE OF GENERAL COUNSEL 
FRONT OFFICE 
(THROUGH 7/28/00) 

PAGES REVIEWED: 154 

PAGES RELEASED: 154 

EXEMPTIONS CITED: b6-l, b7C-l, 

b6-3 & b7C-3 




r - THr WALL STREET JOURNAL ^ 
Internet Companies Decry FBI’s 
E-Mail Wiretap Plan 
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to outside audit, ?1te toireati aays that it 
dev$E>ped the Carnivore system precisely 
to attorns the ssme privacy concerns that 
many toton^t providers have, FBItodmir 
asm also toe tiled to recent weeks to 
explain to Industry specialists how Carni- 
vore «Hta, partly to silay feats that the 
system might he open to abuse . 

Still, there is a drive afoot in the Inter- 
,Mt Industry to create a more open solu- 
tion that could replace Carnivore, Industry 
experts argue that creating their own de- 
vice would Jesses suspicions and allow for 

dicker modifications as Internet proto* 
cats change. The FBI says that a small 
number of Internet providers already have 
built-in capacities to meet federal wiretap 
requests. Carnivore is required .for those 
that don’t have the ability to do the wire- 
taps themselves, 

' * -Neil King Jr. 
contributed to this article 

£!£& l***™ 1 ^ Unk: Ecad an 'mm hmfmg 
4^nil and joia a discussion about privacy 
and the Internet in the online Journal 
at WSheem, 
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Of Privacy 

New System Tracks 
Suspects Online 

Bf JOHtf $CKTOUft2 
gfohwgtan Pott Staff IFritfr 

The FBI has deployed m mi& 
mated syst em to wiretap the Inter- 
net* giving authorities a new tool 
to police cyberspace bat drawing 
concerns among dvii libertarians 
and privacy advocates about how it 
might be used. 

The new computer system, 
dubbed "Carnivore" inside the FBI 
because it rapidly finds the "meal" 
is vast amountsof data* was devel- 
oped at FBI computer labs m 
Quant ico, V&., and has been used 
in fewer than 50 cases so far, 
i But that number is sure to rise, 

I said Marcus Thomas* chief of the 
; FBfs ober-tedmology section at 

j Quajntico. "In criminal situations' 

there's not yet been a large call for 
>C he said, but the bureau already 
has seen "growth in the rate of re- 
quests," 

Civil liberties groups’ said the 
new system raises troubling issues 
\ about what constitutes a reason- 
able search an d seizure of electron' 
ic data. In smiting out potential 
criminal conduct* the new tecbnol- . 
ogy also could scan private in- 
formation about legal activities, 

*Tt goes to theriieart of how the 
Fourth Amendment and the feder- 
al wiretap statute are going to be 
allied m the Internet age** said 
Marc Rotenberg* head of the 
Washington-based Electronic Pri- 
vacy Information Center. 
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The new system* which operates on off- 
the-shelf personal computers, takes ad- 
vantage of one of the fundamental princi- 
ples of the Internet that virtually all such 
communications are broken up Into "pack- 
ets," or uniform chunks of data. Computers 
on the Internet break tip e-maH messages. 
World Wide Web rite traffic and other in- 
formation into pieces and route the packets 
across the network*- whm tbev are 
reassembled os the other end . 

FBI programmers devised a "packet snift- 
er* system that can analyze data Sowing 
through computer networks to determine 
whether it is part of an e-mail message or 
some other piece of Web traffic. 

The ability to distinguish between pack- 
ets rilows law enforcement officials to tailor 
their searches so that* for example* they can 
exarmae email but leave alone a suspect's 
online shopping activities. The system 


could be tuned to do as little as monitoring 
hm many e-mail messages the suspect 
s^nds and to whom they arc addressed — 
the equivalent of t telephone "pen register * 
which takes down telephone numbers being 
called without grabbing the content of those 
calls, 

"Thaf$ the good news** said James 
Dempsey an analyst with the Center for Do- - 
moeracy and Technology; a Washington 
high-tech policy group. "It is a more dis- 
criminating device" than a full wiretap* he 
said. 

But Dempsey expressed worries about 
the new system* which would be installed al 
the offices of a suspect's Internet service 
provider. Just as the device could be used to ■ 
fine-tune a search* it also could used for 
broad sweeps of data. The bad news Is that 
It f s a black box the government wants to in- 
sert into the premises of a service provider. 
Nobody knows that it does what five govern- 
merit claims it would do * Dempsey said.* 


Existence of the Carnivore system was 
discussed in a Wall Street Journal article 
yesterday, which reported that the FBI 
showed the system to triecommunications 
industry experts two weeks ago. 

Albert Gidari a lawyer who works for the 
wireless industry, was present at the FBI 
demonstration. He said the FBfs announce- 
men! was {Mended to counter industry as- 
sertions that it would be very difficult to 
provide the kind of penregister wiretap ca- : 
pab&tythat the agency wants. 

Since the demonstration* Gidari said* one 
faction within the fe&communkatfons m- 
dustjy was pteed with the FBTs e gbits. 
But Gidari said the other faction was say- 
i mg. "Writ a mfoute-~wbat are the liability 
Issues? What am the privacy issues? We 
don't want thijd-party software on our sys- 
tem.* > ' ' 


wiretap. Gidari ts one of a large number of 
industry experts who believe the hw does 
apply to wiretapping the Internet "The 
FBI overreaches In everything they do * 
said Gidari, who is president of G-Sawy, an 
iMenietconsdtmgcompany 
A former federal prosecutor sounded a 
more supportive tone. Tf what It does is it 
hefps comply with wiretaps* and it helps 
nunlmbe what you're getfing-Ho help get 
what .the court authorises you to get— 
{here’S BOthing wrong with fC said Mark 
Easch, now a security consultant with Ee$- 
toa-based Global Integrity, 

SiSl* Easdi said the technology raised 
questions that have yet to be fidiy explored 
by law enforcement The PC robooop exam- 
ines all packets commg through a computer 
network but gives five law enforcement offi- 
only those packets related to the sub- 
let of the investigation 
"The stuff that is examined only by" a 
computer md not by a human befog— was 


m then .suggested an answer: It is & 
^arch, but it is to m extent less fovarive" 
than it would be it you did not use this tech: 
oology. 

. |he first news of Carnivore actually came* 
m April during congressional testimony by' 
Washington lawyer Robert Cons-Rever* 
^ho represented an Internet service proyfo- 
er that toed to resist attaching the system 
to its network. Com -Revere suggested that 
such a system could be used to track dis^ 4 
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Justice, on Both Sides of the Border 


Agustm Vazquez Mendoza landed on the 
FBI s 10 most wanted list four years ago for 
allegedly ordering Ms henchmen to kill a 
Drug Enforcement Administration agent in 
Anzona, Now he’s under arrest, but in 
Mexico, which roust decide whether to extra- 
dite a Mexican citizen to face charges in the 
United States. Mexican law officers rooanted 
a nationwide manhunt to capture Vazquez 
and certainly want him brought to justice, 
but some traffickers have won appeals 
against extradition. 

Most countries are understandably reluc- 
tant to hand over a citizen to be tried in a for- 
eign country. In addition, the language in the 
current Mexico-U.S. treaties clearly specifies 
that neither country is bound to extradite a 
citizen. However, there are circumstances in 
the Vazquez case that should make it easier 
for Mexico to send him off. 


^Since President Ernesto Zedillo took office, 
there has teen a shift of attitude in Mexico 
on extradition. At least nine Mexican sus- 
pects have teen sent to be tried in the United 
States. In two of those cases, the suspects al- 
legedly killed US. immigration officials, in- 
viting comparison with the Vazquez case. 

According to US. authorities, Vazquez or* j 
dered the murder of agent Richard Pass in ’ 
order to keep both a drug delivery and the 
$160,000 the undercover agent was about to 
pay for it. 

Perhaps the most persuasive argument is 
that Vazquez, who fled to Mexico after the 
mitag, is not accused of a crime in Mexico 
and if he is not extradited will have to be set 
free. Mexico's foreign minister should con- 
sent to the U.S. extradition request and peti- ■ 
tion the justice system to send him north as ] 
qyjcicly as the legal process sJlows, f 


n 
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It Won’t Install 
Device for FBI 


One of the nation's largest Imeraet ser- 
vice providers, EmhUnk I«c. ( has re- 
fysed 10 install a new Federal Bureau of 
Investigation electronic surveillance de- 
?*» on lts saying technical ad- 

justments required to use the device 
caused disruptions for customers. 

The FBI has used Carnivore, as the 
sumiilanee device is called, in a number 
of criminal investigations. But EartfcUnfc 
is the first ISP to offer a public account of 


Bp Wajj Street Journal staff reporters 
htm llmgfield, Ted Bridis and Nml 
King Jr, 


an actual experience with Carnivore. The 
FBt has daimed that Carnivore won't in- 
ter/efe with m ISP's operations. 

"It has the potential to hurt our net- 
work, to bring pieces of it dowtij Steve 
Dougherty. Earthlink's director of technol- 
ogy acquisition, said of Carnivore “It 
could impact thousands of peopled 

Earth Link executives said they 
would continue to work with authorities In 
cnmmal investigations, they vowed not to 
allow the FBI to install Carnivore on the 
company's network. The company also 
has substantial privacy concerns. 

Earthlink has already voiced its con- 
cerns in court. The ISP h the plaintiff in a 
“*** fight launched a gainst Carnivore ear- 
tj] 1 * Tear with the help of attorney 
Robert Com -Revere, according to people 
close to the case. Previously, the identity 
of the plaintiff m the case, which Is under 
seal wasn't known, a federal magistrate 
rtded against EarthUnk in the case early 
this year, forcing it to give the FBI access 
to us system. Mr. Corn-Re vere declined to 
comment. 

EanhLmk's problems with Carnivore 
fe Mr i ier this year ' when me FBI in- 
? a “t d * ****** device on in rtm-ort 
at a hub site m PasatJena, CaSM. The FBi 
had a court order that aitowed it to ijistail 
m equipment as part of a criminal invest 
gation. 


The FBI connected Carnivore, & small 
computer box loaded with sophisticated 
software for monitoring e-mail and other 
online communications, to EarthUnk's re- 
mote access servers, a set of networking 
equipment that answers Incoming modem 
calls ^ from customers. But Carnivore 
wasn't compatible with the operating sys- 
tem software on the remote access serv- 
ers. So Earthlink had to install an older 
version of the system software that would 
work with Carnivore, according to Mr* 
Dougherty 

EarihLtnk says the older version of the 

software caused Its remote access servers 
to crash, which in turn knocked out access 
for s number of its customers, Mr, Dough- 
erty declined to specify how many, saying 
only that *many* people were affected. 

Earthlink executives said they were 
also concerned about privacy. The com- 
pany said It had no way of knowing 
whether Carnivore was limiting its surveil- 
lance to the criminal investigation at 
hand, or was trolling more broadly. Other 
fSF^ have said there could be serious liabil- 
ity issues for them if the privacy ofindhid- 
uals not connected to an investigation is 
compromised. 

There ought to be some transparency 
to the methods and tools that law enforce- 
menus using to se&rch-and-seise commu- 
nications,” said John ft I^Galbo, rice 
president of public policy at PSLNet Inc. 
an ISP in Ashburn, Va, 

EarthXink executives declined to sav 
whether the company has received court 
jrders for infonMfto^bou^oiher custom- 



eis since the disruption earlier this year, 
Earf blank said it would help authorities in 
criminal investigations using techniques 
other than Carnivore, . ‘ 1 ‘ " 

The FBI insists that Carnivore doesn't 
affect the performance or stability of an 
Internet provider's existing networks. The 
bureau says Carnivore passively monitors 
traffic, recording only information that Is 
relent to FBI investigations. 

In some cases, the FBI said, the Inter- 
net prorider is equipped to turn over data 
without the use of Carnivore, This is com- 
mon In cases where only e-mail messages 
are sought because that type of data can 
easily be obtained through Jess-intrusive 
means. 

Attorney Genera! Janet Reno said yes- 
terday that she was putting the system 
under review. She said the Justice Depart- 
ment would investigate Carnivore's consti- 
tutional implications and make sure that 
the FBI was using It In "a consistent and 
balanced way." 


t 0~ 
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White House Proposes Wiretap Law 

ay KALPANA SR1N1VASAH 
rrn Associmd Prms 

WASHINGTON (July 17) - The White House proposed legislation Monday to update wiretapping rules so that legal protections 
currently applied to telephone calls are extended to electronic communication, such as email 

The plan would require law enforcement officials to obtain high-level approval before applying for a court order to intercept the 
content of e-mail * in line with current rules that govern listening to phone calls* 

/ 

"Basically. the same communication, if sent different ways * through a phone caif ora dial-up modem - is subject to different and 
inconsistent privacy standards,” said White House Chief of Staff John Podesta, in announcing the proposals, “it's time to update 
and harmonize our existing laws to give ail forms of technology the same legislative protections as our telephone cassations.*' 

The measure also addresses so-called "trap and trace* orders which allow taw enforcement officials to identify the source of a 
phone call or an e-mal, but not intercept its content. Under the proposal, law enforcement officials would only need one order to 
trace an e-mail or a phone cadi, even though such communications may travel through multiple phone carriers or internet 
providers. 

Officials also could trace such communications without prior approval in an emergency situation, such as when a computer is 
under attacK. 

But for the first time, the administration is proposing that a federal or state judge independently determine whether the facts 
support such a trace order. Under current roles, judges accept the declaration of law enforcement officials agencies that such an 
order is warranted. 


262^ 324_ 6490 P. 01/01 
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Those changes could affect the new “Carnivore* system, which the FB! is using to obtain e-mails of investigative subjects after 
qettlng a search warrant. Whan Carnivore is placed at an Internet service provider, it scans all incoming and outgoing e-mails for 
messages associated with the target of a criminal probe. 

Under the proposed changes, if the Carnivora system is being used to intercept the content of electronic communications, then 
law enforcement officials would first need high-level Justice Department approval before obtaining a court order, Podesta said. 
Higher standards limiting its use also would apply, he said* If Csmhore is being used only to track Information; officials would 
need m independent judge to review the tracing order, he added. 


-But the American Civil liberties Union chided the administration's proposals Monday, saying It should have suspended use of the 
system outright 

"Carnivore represents >3 grave threat to the privacy of all Americans by gmng Jaw enforcement agencies unsupemsed access to 
a nearly unlimited amount of communications traffic,* said Barry SteinharriL ACLU associate director/ 

Last week, ACLU officials said they were going to use the Freedom of Information Act to try to force the FBI to disclose details of 
the inner workings of Carnivore, - 

The proposed measures would also address inconsistencies in how current law applies to different networks carrying Internet 
traffic. For example, now that cable systems are being upgraded to offer two-way services, taws that apply to dial-up modems 
over phone Unas should be extended to cable connections* Podesta said. 

The proposal requires congressional approval, and several lawmakers already introduced their own versions* 


Hie Clinton administration also announced Monday updates to its export control policy for powerful data and voice-scrambling 
technology* Under the change, American companies can sell encryption products to any end user in the European Union or 
these eight other trading partners: Australia, Norway, Czech Republic, Hungary, Poland, Japan, New Zealand and Switzerland. 

The policy change wit! also remove a previous technical review waiting period of 30 days* ^ 5 
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ACLU Asks Details 
On FBFs New Plan 
To Monitor the Web 


By Nick Wingfield 

Staff Reporter *yf Tm Wau. Street Jmttt * al 

The American Civil Liberties Union ts 
seeking to force the Federal Bureau ofim 
Ycstigatta to disclose the technical details 
behind a controversial electronic somih 
lance system created by the bureau. 

The ACLU, using a novel tactic to Hen- 
hfy the monitoring capabilities of the sys- 
tem, filed a Freedom of Information Act 
Hjquest with the FBI Friday, asking the 
bureau to release the computer “source 
code" for Carnivore, as the surveillance 
' system is called. The civiMiberties group 
also requested that the FBI turn over ’let- 
ters, correspondence, tape recordings, 
notes, data* memoranda, e-mair and 
other information connected with Carnh 
Tore, The ACLU also ashed for informa- 
non related to Omnivore and EtherPeek, 
tu^o other surveillance systems used in the 
past by the bureau. 

The request reflects the growing con- 
cern among privacy groups and Internet 
companies about the privacy implications 
of Carnivore* The FBI surveillance $ys- 
tern, a hardware device that contains a 
specialised program for tracking e-mail 
and other forms of online communication 
has especially raised hackles among Inter' 
net service providers* The FBI is attempt- 
mgto install Carnivore on the networks of 
ISPs as part of specific criminal investiga- 
tions of online men. But ISPs say they 
have no way of knowing whether Carni- 
vore is limiting the scope of its surveil- 
lance to the cases at hand. 

As a result; critics of Carnivore have 
called on the government to reveal the 


technical capabilities of the system. Such 
information could indicate whether Carni- 
vore is able to restrict its monitoring to 
the communications ofi say a single crimi- 
nal suspect while Ignoring other data traf- 
fic irrelevant to the investigation* 

The source code behind Carnivore 
could provide clues to those capabilities. 
Source code is essentially the technical 
blueprint behind a program. The ACLU 
contends* , and technical experts con- 
curred, that examining the source code 
behind Carnivore's proprietary surveil- 
lance software could reveal something of 
the inner workings of the system. 

The Electronic Privacy Information 
Center, a Washington advocacy group, last 
week also filed a sweeping Freedom of 
Information request for "all records" relat- 
ing to Carnivore* though it didnV explic- 
itly request the system’s source code* “But 
we made clear we are seeking everything 
including software," said David Sobol, a 
privacy activist at the center. 

If is unclear whether using the Free- 
dom of Information Act will compel the 
FBI to produce the software behind Carni- 
vore though. Bequests made under the act 
are normally used to obtain official govern- 
ment documents, not software code* Barry 
SteJnhardL associate director of the 
ACLU, said two federal appeals-court rub 
ings that classified software code as a 
form of speech could help his case, 

** ail but certain they win mi want 
to release any information on Carnivore, 
and we will probably have to fight this in 
the courts/ Mr, Sfeinhardt said of the 
FBL “But we think this is worth fighting 
for* 

The FBI didn't return calls seeking 
comment on the Freedom of Information 
request 

As the outcry against Carnivore has 
escalated, some prominent figures in the 
Internet industry have expressed a some- 
what more sympathetic view towaid the 
FBL Vint Cerf t who has been dubbed the 
"father of the Internet** for his develop- 


ment of the early technical foundations of 
the network, said it is "understandable 
that law-enforcement agencies feel 
pressed to develop methods to observe In- 
ternet traffic for the same reasons they 
have fell compelled fo find ways to listen 
to certain telephone conversations/ 

a-matl message, 
added that such modern surveillance teefr 
mques need to be balanced "against poten- 
tially abusive practices that could seri- 
ously erode personal privacy" 

-Nett King Jn 
contributed to this article. 

Coca-Cola FUes to Have 
Second Race-Bias Suit 
Moved to Federal Court 

By a Wau, Street Journal Staff Reporter 

ATLANTA-- Coca-Cola Co., in the pro- 
cess of settling a class-action race-discrim- 
ination lawsuit, has filed a motion to move 
a second, $1,5 billion race-bias suit to fed- 
eral from state court 

The soft-drfnXeompsDyaitued in a mo- 
tion hied Friday that most of the claims in 
the lawsuit, filed last month on behalf of 
four female black Coke employees by 
Willie S. Gary and Johnnie Cochran, in- 
' volve federal laws. 

But a lawyer on Mr, Gary’s team, Tri- 
da CX Hoffler, disagreed and said Mr. 
Gary would file a motion this week fo keep 
the cise in state court. Mr. Gary, a per- 
aortal-injury attorney, generally brings his 
cases to state courts and has said he pre- 
fers that venue. 

The lawsuit filed by Mr. Gary claims a 
variety of form of discrimination, includ- 
ing negligent hiring, intentional inSietion 
of emotional harm and hostile work envi- 
ronment, Coke has called Mr. Gary an op- 
portnnlsf and denied the charges. 
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The Clinton administration yes- 
terday called tor updating wiretap 
ping laws to extend the powers of 
law agreement to the online world 
while providing new legal protec* 
lions for electronic communication. 

Administration officials also an* 
flounced, as expected, a plan to loos* 
en controls on the export of encryp- 
tion aoftwam— the programs that 
help Internet users scramble mes- 
sages and data to protect them horn 
prying eyes. 

On the wiretapping issue. White 
House chief of staff John 0. Pode- 
sta, in a speech at the National Press 
Club, described the coming legisla- 
tive package as seeking to eliminate 
confusion about the level of legal 
protection for various forms of com- 
munication. 

Telephone conversations get fair- 
ly strong, protection tom federal ; 
wiretaps under the 1968 Crime Pa- 
trol and Safe Streets Act which re- 
: quired a court order and high-level 
Justice Department approval Wire* 
tape rules for e-mail sent by dial-up 
modem are covered by the Electron* 

| tc Communications Privacy Act- of: 
1986, That law might not cover e- 
mail sent by high-speed cable mo- 
dem, and cable companies have ar- 
gued that their online services 
1 should be given extremely high pro- 1 

tection from government sumH-- 
lance under the Cable Act . 

*lt*s time to update and harmo- 
nise our existing laws to give all 
forms of technology the same legist ; 
lathee protections as our telephone 
conversations^ Podesta said. , 

lawmakers said they welcome 
the opportunity to work with the ad- 
ministration on these issues, Sen. 
Orrin G* Hatch (fcUtah)* who has 
introduced an Internet privacy bill, 
said: "It is imperative that we bal- 
ance the interests of law enforce- 
ment with the privacy rights of the 


American people* We must ensure tliat appropriate 
checks are in place where the government accesses pri- 
vate communications of Americans,'’ 

Hotiestasaid the bills making up the package would be 
unveiled within 10 days, and that he hopes the legisla- 
tion can be passed by the end of the year, 

Podesta also spoke about the new surveillance tech- 
nology known as Carnivore, wltich gives law enforce* 
meat authorities the ability to selectively monitor the 
Internet traffic of individuals, similar to the devices that 
can record the telephone numbers of calls made and re- 
ceived by a suspect Unlike M-Oedged wiretaps, Hie ju- 
dicial oversight of such surveillance is slight, and the 
protection against abuses of the technology by law en- 
forcement is weak, Fodesla called for greater judicial , 
oversight 

lire Podesfa speech ms not well received by end lib- 
erties advocates, who have fought Carnivore and other . 
administration attempts to expand wbetappmg capabil- 
ities on the Internet Barry Stemhardt* associate direc- 
tor of the American Civil Liberties Union, called the 
speech "deeply disappointing, . . . While the Clinton ad- 


ministration's proposals have some heartening qua 1 
to them, they are too little and too late * with too 
time In tire legislati ve session to pass new hills. The 
nivrire system, Steinhaxdt said, ^represents a j 
threat to the privacy of all Americans by giving la 
forcement agencies unsupervised access to a nearly 
limited amount of communications traffic,* 

Podesta also discussed the new encryption 
which the administration can implement Imme 
Under the plan, US, companies wil be able to expor 
. pMsticated cryptography products to users in an 
tion in the European Union and to Australia, Noi 
the Czech Republic, Hungary, Poland, Japan, New 
land ’and Switzerland The government will elimi 
Hie statutory Stiday waiting period before mieh exf 
cm tajse 0ace but wH keep in place a requirement 
new ledmologses be submitted.to the government 3 
technical review. 

Encryption has been a high-tech battlefield fee 
early days of the Clinton administration, Few tec 
gies are as important in the fight to maintain pens 
and business privacy; but few technologies present < 
daunting issues for law enforcement officials fiJkeFB 
rector Louis X Freeh, who often warps that crirni 
and terrorists can use “crypto* to cloak their plans 
activities. High-tech companies snccessftiSy argued 
US, restrictions harmed only American compa 
since (mrsemMms ^ere successfully jmrketingst 
encryption products; and in' January the Clinton ad 
stratum reduced controls on encryption exports, 

“The reducing of these regulations, will certain! 
low US. software makers to compete in the global 
ketplace,* said Robert Hofieyman, the chief exeeuti 
the Business Soft ware Alliance, 
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‘Carnivore’ Won’t Devour Cyber-Privac 
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By Billies UKJtKmviTX 

On Monday the White House proposed 
new legislation regulating surveillance by 
law enforcement agencies on the Internet 
Sut civil libertarians are already complain* 
lag that this plan does little to address the 
problems ostensibly raised by Carnivore, 
the FBI's new software system for perform- 
ing comt^rdered wiretaps at Internet ser- 
vice providers (ISPS). 

Using a laptop computer, law enforce- 
ment officials can hook Carnivore into an 
ISP's network. Once Installed* it reads the 
headers of each e-mail message —listing 
the sender* recipient and subject of the 
mes$age-as it passes through. If the 
sender or recipient is the target of a tap. 
Carnivore records the message. 

Rights at Risk? 

Here's the rub: Before Carnivore can 
know whether * message belongs to a tar- 
geted party, it must browse the headers of 
all the messages passing through the JSR 
With a traditional phone tap, law enforce' 
meat officers only listened to the tele- 
phone line that the subject of the tap was 
using. The ACLU and other critics com- 
plain that when Carnivore reads the head' 
ers of anyone who Is not a target it no- 
dates their rights. 

| The ACLU- and other Carnivore critics 
peed to get a grip -and a hatter under- 
standing of the new technology. 

L Unlike old-fashioned analog telephone 
pBs, e-mail messages are transmitted dig- 
plly. A computer slices and dices the mes- 
sage Into packets, each with an identify- 
£S; tag* . The packets then spread out 
throughout the Internet, finding the most 
dpcient path to the destination When 
they arrive, they are reassembled, and the 
t^>ient gets the message. As a result, 
with ^mad, you cannot *tap a Mae* be- 
ram- often there is t Uteblly, no parheu- 
^ you can do is scan the 

known to use-iike. his ISP-and 
^ belong to him, 
Unats wtiat Carnivore does. 


flats. But 
use— a 

T^^acus^|(6te to FBI: 

15 < 




These kinds of flaps are happening 
more and more often. Uixi April some pri- 
vacy advocates complained when the FBI 
requested SIS million for "Digital Storm," 
a program for monitoring telephone calls 
and analyzing recordings. In September, a 
programmer in North Carolina found the 
notation "NSA Key” in a Microsoft soft- 
ware patch. Soon rumors bounced through 
the Internet claiming Windows had a back 
door that allows the National -Security 
Aaency to monitor your computer, (Mi- 
crosoft explai ned Shat the tag merely signi- 
fied that the .software complied with the 
agency's security standards,) 

The granddaddy of all bogus fears, 
though, is Echelon, If you believe some 
European Union parliamentarians, the 
United States and Britain operate an inter- 
national network that monitors virtually • 
all commtmicatlons, and extract choice f 
nuggets with powerful computers that rec- 
ognize key phrases in messages like *as- 
sasrinatfon,* “terrorist attack” or “indus- 
trial secret,” 

In reality, it's not easy to find a specific 
message in a flood of free-flowing digitel i 
data. That's the whole reason for getting a I 
court order for a wire tap. If you cannot I 
hook m&M mM** 
searching to find the message you want to 
intercept. 

That is also why the European cam- 
paign against Echelon is so quixotic. True, 
the folks at NSA Intercept communications 
and they have powerful computers and in- 
genious software that helps with the pro- 
cessing. But it is impossible for even the 
best computer system to routinely sort 
through all of the world's telecommimiet' 
tions and pull out telltale messages, as the 
Echelon paranoids would have you be- 
lieve. 

Usually you need 
to know what you are 
looking for and 
where foe message 
might appear before 
you have much of a 
chance of findiartt 
Also, foe cases in 
which one message, 
tells a .whole story, 
are rare. Good law 
enforcement and In- 
telligence usuahyre- 
quires ; multipie v 
sources and . collat- 
eral Mprinabonfto 
makeien^-bfMSh- 

rev^^psl^pgt 


for our law enforce- 
ment and mteilh 
ffeuce organizations 
to listen in on com- 

o!d *& >r coum tapTSSSij 1 * 

caDtor'frfi riM l!SmUCh more <WficuK to 
capture digital messages (hat pass over 

fiber optics or bounce through cellular net- 
w»rte And. with strong encryption soft- 
ware freely available world-wide anvone 
really determined to keep a message se- 
cret can usually do so. 

If you have any doubts, just recall bow 

S smTises we ^ve had 

tetoiy-toeMian nuclear test, the North 
Korean missile test, the terrorist bomb- 
, Ame ™ an targets in the Mideast 
and Africa. Part of the problem is that we 

Srf mm ° f ae sources 51131 «« 
used to, and everyone is getting better at 

concealing their c ommunic ations. i 

So why is It so easy to stir up these 
controversies about privacy? The simple 
f&ctis that relations between the govern- 
ment and the new Information Industries 
I are lousy. There Is too much suspicion and 
1 too tittle communication. ' > , 

The administration gets part of foe 
blame for its barn-handed policies, Canii' 
vore as a good example. A lot of contra 
ye^sy could have been defused If the tel 
had offered more insight Into how the sys- 
tem worked and bow foe rights of non-sus- 
pects would be protected. 

But the record of foe teclmogeeks lm 
not been much better. They often act, as 
though law enforcement officials have 'no 
business poking Into foeir activities ,kt 
all— as though me could stop mtexnahcKai 
computer criminals with a good neighbor- 
hood watch program. 

IV$ all too easy to lose sight of the ‘fact 
that Camivore's-foafo targets are ey^rr 
eriminals~m other Swords, the- 
crooks who are a plague. on the Internet 
and target dot-com companies. Growth 
rates for Internet shopping have been pip- 
ping lately. According to some experts* 
people worry about whether their credit 
card numbers and health records are safe. 
You would think foat e-business would $e 
. foe first to support better -law enforcement 
on foe netiv , / -X '>* ; ; •* u ■ 

r.qptajBon- 


y 
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reasonable cooperation from the private 
sector, and aggressive few enforcement i 
and effective intelligence closely moni- 
tored by responsible public officials, ' 
Fixing the relationship between Wash- 
ington and Silicon Valley needs to be a top 
priority for the next administration. The 
only people be&efittfrsg from controversies 
like the one over Carnivore are terrorists, 
criminals and rogue states. 


Mr. Berkowitz is a research fellow at'ihe 
Hoover Institution m3 coauthor of "Best 
Truth: Intelligence in the Information Age" 
OWe University Press, BOOOh / 
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July 19, 2000 


Honorable Charles T. Canady 
Chairman 

Subcommittee m the Constitution 
Committee on the Judiciary 
House of Representatives 
Washington, D,C« 20S15 
/ 

Dear Mr, Chairman: 

We very much appreciate the opportunity to appear before the Constitution 
Subcommittee on Monday to discuss "Carnivore.” The public testimony, we believe, will be 
very helpful in our efforts to explain what Carnivore is and, equally important, what it is not. 

In that regard, USA Today asked us to provide a brief 350 w'ord explanation for use 
on the editorial page. While a full statement obviously will be provided to the Subcommittee, we 
would like to share with you the text of what was provided to the newspaper. In a very' concise fashion, 
it encapsulates our explanation of what the system does electronically to ensure strict compliance with 
the court orders that instruct us precisely what can and cannot be intercepted. I also have enclosed a 
graphic that you may find helpful . 

As the brief summary points out, Carnivore is used only when Internet Service Providers 
are unable on their own to restrict interceptions wi thin the narrow confines of the controlling court order. 
In addition, no interception can occur unless the FBI or other law' enforcement agency can demonstrate to 
a judge's satisfaction that the strict statutory requirements have been met’ e.g., that there is probable 
cause that a crime is being or has been committed, that the intercepted e-mails will be in furtherance or 
about that crime, and that the interceptions are necessary to collect evidence of that crime. That is why 
its use has been very limited, predominately to intercept e-mails in terrorism cases. 

I hope you find this helpful. Again, we look forward to testifying and, in the interim, if 
you have any questions, please do not hesitate to ask. We would be pleased to brief on any aspect of this 
system. 


Sincerely yours. 


John E. Collingwood 
Assistant Director 
Office of Public and 
Congressional Affairs 


1 - Mr. Pickard - Rm 7142 
1 * Mr. Alba - Rm 7128 
1 - Mr. Gallagher - Rm 7110 
1 - Mr. Garcia - Rm 7116 
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X: Dr. Kerr - Rm 3090 
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Honorable Charles T* Canady 


Honorable Henry J. Hyde 
House of Representatives 
Washington* D,C, 20515 

Honorable Asa Hutchinson 
House of Representatives 
Washington, RC 205 5 5 

Honorable Spencer Bachus 
House of Representatives 
Washington, RC 20515 

Honorable Robert W. Goodlatte 
House of Representatives 
Washington, D,C 20515 

Honorable Bob Barr 
House of Representatives 
Washington, D C- 20515 

Honorable William L. Jenkins 
House of Representatives 
Washington, RC 20515 

Honorable Lindsey Graham 
House of Representatives 
Washington, RC 20515 

Honorable Melvin L. Watt 
House of Representatives 
Washington, DC 20515 


Honorable Maxine Waters 
House of Representatives 
Washington, DC, 20515 
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Honorable Charles T, Canady 

Honorable Barney Frank 
House of Representati ves 
Washington, D,C 20515 

Honorable John Conyers, Jr, 
House of Representatives 
Washington, B.C 20515 


Honorable Jerrold Nadler 
House of Representatives 
Washington, D.C. 20515 
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U.S. Department o.Z^stiee 

Federal Bureau of investigation 
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First, lets get the facts straight. The. FBI and all 

f 

t 

other law enforcement agencies ' can only intercept e-mails 
pursuant to a court order signed by a judge who is satisfied that 
the government has demonstrated probable cause that a serious 
crime is being or has been committed, the e-mails will be about 
that crime and the interception is necessary to obtain evidence 
about the crime. To conduct an intercept beyond that is a 
federal crime subject to severe criminal and civil sanctions. 

The entire process x'equires continual reporting to a court and, 
of course, ultimately is subject to vigorous challenge by defense 
attorneys . 


What does "carnivore” do? In the simplest terms, it 
ensures that only the exact communications authorised by the 
court to be intercepted are what is intercepted. So, for 
example, if a court authorizes only the interception of e-mail 
from a particular drug dealer to another drug dealer, this system 
captures only that e-mail to the exclusion of all other computer 
communications regardless of who sends them and where they are 
going. Nothing else is monitored or collected, and everything 
collected is supervised by the court. It would be a federal 
crime to do otherwise. 


5/24/02 Rdease - Pag* 


13 



When is carnivore used? It is used only when an 
Internet, service provider cannot, on its own, effect the 
interceptions consistent with a narrow court order. Accordingly, 
it has been used very tew times, predominately to intercept 
e-mails in terrorism cases and, again, subject to the supervision 
of a court. 


In 1968, Congress spelled out strict requirements for 
the interception of communications . Carnivore simply ensures 
that law enforcement complies precisely with those requirements 
as technology advances. We understand why certain segments 
oppose this court ordered technique. But since 1968, because of 
this law, many lives have been saved and thousands of drug 
dealers, terrorists, child predators and spies are in jail. 

The Chairman of PSINet laid out the appropriate 
challenge. He does not want to see carnivore on his network 
unless we can prove it sifts out only the traffic from the target 
of a coux't order. That, of course, is precisely what carnivore 
does, electronically protecting the privacy of those not subject 
to the court order. 
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Carnivore E-Mail Tool Won’t Eat Un Privnr 
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WASHINGTON -Packed m a slim \&p- STSi^^SSriiS?' Ca V* ” m U(lY^ tiff T 

>P computer, the Federal Bureau of loves- JL* , fmm Iimo ' X £jf 

rattan's Internet survAmanr* mnt users? How frequently is it used, and ^ ^ 


By Tk» 8 sums 
And Neil Kmc; Jr. v 

Staff Reporters uf Tjic Wall Smisttr Jtswtwii. 

WASHINGTON-Padced m a slim lap- 
top computer, the Federal Bureau of inves- 
tigation’s Internet surveillance system. 
Carnivore, looks downright docile. One of 
its creators calls it merely a "tool in a tool 
box" for tracking hackers and terrorists. 
Us name, the FBI admits, is unfortunate. 
It is too late to change the name-but 
not too late, the FBI figures, to try to 
change the -opinions of privacy advocates 
*and lawmakers who have spoken harshly 
of the high-tech sniffer. So the agency has 
launched an Intense, behind-the-scenes 
campaign to deflect congressional skepti- 
cism and convince wary Internet eompt- 
lies that Carnivore is a much pickier eater 
than its critics claim. 

; Since news of Carnivore broke last 
week, FBI officials have swarmed Capitol 
Mil to demonstrate the system to key 
^embers of Congress and their staff. The 
officials also have shown it to mo federal 
♦Mdges and a small group of reporters for 
fee Waif Street Journal. And Tuesday, the 
published a lengthy article about Qar- 
ipyorc m its ’Web site, describing ft;as a 
^diagnostic too!” that employs new tech- 
*h> lawfully obtain important infar- 
f niahon while providing enhanced privacy 
‘ junction/ 

The message: Carnivore is a surgical 
^pw^nforcement device used rarely and 
My uR&or strict court orders. And, con- 
i mxy to fears espoused publicly in recent 
Jays, the system doesn't gobble up ail 
passing e-mail in its search for the corre- 
-^wttdence of a single suspect. "This de- 
' *fee is blind to everything but the packet 
Jpf information] that it's set to retrieve/ 
Jays Thomas Motta, an assistant general 
Joussei for the mi *IV$ like a cop who 
see anything hut a blue car on a 
'highway/ 

**••* ^ advance of a hastily called congres- 
jlonai hearing next week, FBI officials 
mo have been expressing regrets about 
*the system's name. Carnivore was the in- 
Jouse moniker given to the successor of an 
feriier surveillance system, which was 
IgHed Omnivore. Ho one thought the name 
;jdufd become public. When it did last 
4 week* Attorney General Janet Reno called 
M 4 ' mm * change, and FBI Director 
J Wis Freeh started asking how the bu* 
Jfeu could have had such a tin ear* 

/ * ’’Let's just say, weYe going .to put 
inames through the giggle-test a Mttle difs 
‘Terentiy in the future/ says Donald Km* 
director of the special Quantico,. Va,, lab 
that devdooed cimivore/ ' t: ' rr 




rn<ing more than merely cosmetic charts 
Lawmakers are eager to know how vora- 
cious Carnivore could get. Cart it vacuum 
up internet communications from inno- 
cent users? How frequently is it used, and 
under what legal basis? Is Carnivore 
hooked permanency into the country's In- 

The Workings of Carnivore 

* 

Ail data nows through the internet, \ 

##41 


m m nr w w T MM WTATiKkW M, Wf 

7i — 



' internet Service Provider traffic 
the FBI is tapping flows through 
the Carnivore filter. 


' All other data, plus the 
Q otigml data matching the 
fitter, flows onward. ■*. 


m 
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Carnivore ISP Client 

Filter ' ' • -l •• 
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Copy of the v/ 
requested dais 
goes to Carnivore's 
hard drive. v 
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Carnivore's 
Hard Drive 
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, •fee FBI f qtrteyos 
^md .analyzes 
captured data. 


ternet service providers? How can we 
trust that it does only what the FBI says? 

Protecting Citizens 

"We want to hear exactly haw this sys- 
tem works and make sure it raises no con- 
stitutional problems/ say's Rep, Charles 
Canady, the Florida Republican who 
heads the House judiciary subcommittee 
that will question FBI officials next week. 
Adds Rep. Asa Hutchinson, an Arkansas 
Republican and member of the same 
panel: “We have to protect citizens from 
inadvertent action as well as snooping bv 
the government/ 

The system is designed to allow the 
FBI to conduct efficient wiretaps of e-mail 
conversations and other online communi- 
cations involving suspected hackers, ter- 
rorists and ether criminals. The fear 
among critics is that Carnivore will scoop 
up transmissions made between innocent 
civilians And lay them open to scrutiny, 

Internet providers, such as Rnaaifet 
of New Haven,' Conn., say Carnivore Is 
unnecessary because they already can do 


the monitoring the Ml needs if ordered by 
a court, "We're able to .do It faster, more 
efficiently and* most importantly* without 
intruding on the privacy of people not 
within the scope of the search/ says Peter 
William Sachs, president of femn.Net* 
who is scheduled to testify at next week's 
‘hearing* one of fee na- 

f ' hon^ largest Memet:-service providers, 

; says ftTefased earlier this year to install 
: Carnivore on Sts network, claiming techni- 
v cai adjustments required the devled 


In its meetings with lawmakers and otir 
ers ( the FBI has described the inner work- 
ings of the system in unusual detail. In 
one demonstration this week* the agency 
was keen to show how the system could 
tailor its search so it captures only the 
e-mails moving into and out of one particu- 
lar account The FBI said Carnivore is 
smart enough to capture : a suspect's 
e-mails while tearing untouched messages 
sent by his or her spouse or children. 
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4 Pac|ct Fitters* 

•The system belongs to a class of tools 
Known ns "packet niters 4 ' or *sn lifers*" 
which look for parcels of data that travel 
across a network and comprise an e-mail 
or a visit to a Web site. Using: a Windows 
screen* Carnivore also can be set to cap- 
ture file downloads and chat-room conver- 
sations. It c tm grab e-mail from the most 
popular Web-based companies* including 
Yahoo! Inc. and Microsoft Corp.'s Hot- 
mail. And once it is installed at an Infer- 
net service provider* the FBI can dial into 
Carnivore to make changes and monitor 
data that have been collected. 

The FBI is adamant about dispelling 
fears that Carni vore could be used for ram- 
pant tapping of public e-mail systems. For 
one* wiretapping requests are closely scru- 
tinised by the ^Justice Department, and 
must be approved by a federal judge. 
Abuse by a rogue Investigator is even less 
likely, the bureau says, because the rogue 
would need too much cooperation from 
other FBI techies and the Internet service 
provider, says Marcus Thomas, a devel- 
oper of the system at Quantleo. 
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U camS* inf u n * Jt,dBe ‘ s tostractlons, 
■ ramwre am be set to merely trace feter- 

&ST k ! am t0 and from a **• 

raw nfit pen re{rts!er ‘' or “trap and 
*!* recwds tb * totemet ad- 
of passing traffic but not, for ex- 

uS’/ he comen!s or even ihe subject 

nntton »ith >aiL w SlRCe lhe amoun! of infor- 
mation tethered is relatively small in 

these instances, even a week's worth of 

S!< S f " stored on a single 

* k ‘ ^ * mcy sa - vs - With judicial 
permission, the system also can conduct 
fuller intercepts, which would gather the 
contents of the e-mails and other data. 

, „ !? llf ® says Carnivore doesn’t mom- 

bi!itvlwf enf Cf passing e ' raaiis . a capa- 
*****? nsmored to exist in ti ie contro- 
ls 1 K SU 7 eiiiance nef wk °P- 

crated overseas by the National Security 

&”£“?*•* ° f ! iCia,s sald ^teiun/for 
key words in passing e-mails was {Am. 

caily possible, but that ii would slow inter- 
net traffic unacceptably for all customers 

acfiS» atte a Pt Ulth s ® ac!i ®e like this to 
actually read everything that goes by, you 

mas g* C3rm ° t deai a " Mr> Tho- 

vo-S -S-? ra sa £ H has 8s «d Caret- 

tffwun5^JSK! 25 mves ^ a «o«s war 

' raos! feting sus- 
pected terrorists or computer hackers. In 
each ease, the system was connected to t 

wft_eri. it intercepted data or e-mails In 
%l!h a mm order > th& 

nriw *£***«*« w} »o haven't been 
pnvy to toe .FBI demonstrafitas, huneer 

tortcanf^fi hi^' e ^ ia83ti0 » s - The ' 
Amenc&n Cml taberties Union wants the 

FBI to suspend Carnivore's use, arguing 

that Internet providers can alreadvcom 

£“K? £?"* 1»ai » £ 

ft| ed * request Under the 

Sm S 6R Act for & « hiue- 

Camfvore works. Many in 

SL ^IS « waM toese same 
plans-caited the source code"-to insure 

won-far Sy 1 e ? isn ' f °P ei! to abuse and 
won t disrupt business. 

workte m3kS f g Carnivore> s inner 
ai ]° w tockera to 

oeieaut. Once you know how it works 
triviai to «vade it,” Mr 


mnm& ays, 4 

legislation to ^ash Carnivore enti; 

tthfio bUt f , awTO akers could mow 
tighten toe requirements for its use o 
impose rules that would farther pro! 
the privacy of innocent -Internet us< 
S ar £ Ie **“* ^vnivore points no 
need for Congress to wrestle with a if 

iaws mi ‘ M: m ^ ne ^ nation’s 
feted. 




5/24/02 Release * Rale f 7 






( g u , ,J-,J j>H|[L | U | | 

sl^^Mj ^lNSON > pQJ review J^ menl 

^ . VftV i Yn m tfrtwnwrt»j.^ f ^ 




il^WWfea^w^w^ j 




< v , ' ,; ’ ” 1 1 ' »“ •■ T ■ fil m ,, r U , AWJ _ 

%ik 


From: 

To: 

Date: 

Subject: 


7/20/00 4:38PM 
OOJ review of statement. 


6&-t 

DONALD KERR, LARRY PARKINSON, 


Gentlemen: 


it n f L l r fl! i^,. K ? n ' s statement to OPCA, I was informed that DOd will also review 
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SferenSSetr! t SS fJ? 1 i f clude a fjx for »» Problem that we just discussed, namely the 
between J; til s standards for interception of orai/wire communications and those for etertmnt 
communications. The former are set forth in 18 USC 2518(1), the tetter in 18 USC 2518(3). 

For the purpose of this testimony, the two main differences are: 

(1 ) that applications under 2516(3) do not require* senior level DOJ approval and f2> that thev nnt 
limited to certain federal felonies. Thus if we strike the sentence at the bottom of cane Sworton nf nan 

If 1 r nan5?h!f l ^ rt a . ulho . r *f ation b ? a se «ior official of DOJ) and the last sentence in the Lstpai-aoS 
page three ^Further, interception of communications is limited to certain specified fetonv offenses^ 
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use 2816(1) raE 2™ oSs/J nrr*! m S f Tf instances where th ® testimony suggests that we 
016(1} rather than 2518(3), OGC should scrub the testimony again to check for such instances. 


CHARLES STEELE 
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STATEMENT OF 


KEVIN V, Di GREGORY 
DEPUTY ASSISTANT ATTORNEY GENERAL 
UNITED STATES DEPARTMENT OF JUSTICE 
BEFORE THE SUBCOMMITTEE ON THE CONSTITUTION 
OF THE HOUSE COMMITTEE ON THE JUDICIARY 
' on 

“CARNWORE’* AND THE FOURTH AMENDMENT 

July 24, 2000 

Mr. Chairman and Members of the Subcommittee, thank you for allowing me this 
opportunity to testify abouuhe law enforcement tool "Carnivore" and the Fourth Amendment. 
On April 6 , 2000, 1 had the privilege of testifying before you during a hearing on Internet privacy 
and the Fourth Amendment; 1 am pleased to continue to participate in the discussion today about 
Carnivore” and its role In protecting individual privacy on the Internet from unwarranted 
governmental intrusion, and about the critical role die Department plays to ensure that the 
Internet is a safe and secure place. * 

Briy acy and Public Safety 

It is beyond dispute that the Fourth Amendment protects the rights of Americans while 
they work and play on the Internet just as it does in the physical world. The goal is a long- 
honored and noble one: to preserve our pri vacy while protecting the safety of our ci tizens. Our 
founding fathers recognized that in order for our democratic society to remain safe and our 
liberty' intact, law enforcement must have the ability to investigate, apprehend and prosecute 
people for criminal conduct. At the same time, however, our founding fathers held in disdain the 
government’s disregard and abuse of privacy in England. The founders of this nation adopted the 
Fourth Amendment to address the tension that can at rimes arise between privacy and public 
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safety. Under the Fourth Amendment, the government must demonstrate probable cause before 
obtaining a warrant for a search, arrest, or other significant intrusion on privacy. 

Congress and the courts have also recognized that lesser intrusions on privacy should be 
permitted under a less exacting threshold. The Electronic Communications Privacy Act 
( ECPA } establishes a three-tier system by which the government can obtain stored information 
Irom electronic communication service providers. In general, the government needs a search 
warrant to obtain the content of unretrieved communications (like e-mail), a court order to obtain 
transactional records, and a subpoena to obtain information identifying the subscriber. See 58 
U.S.C. §§ 2701-11. 

In addition, in order to obtain source aid destination information in real time, the 
government must obtain a “trap and trace” or “pen registeri’ court order authorizing the recording 
of such information. See IS U.S.C. 1821 et. Seq. 

Because of the privacy values it protects, the wiretap statute, 1 S'U-S.C. §§251 0-22, 
commonly known as Title 113, places a higher burden on the real-time interception of oral, wire 
and electronic communications than the Fourth Amendment requires, hr the absence of a 
statutory exception, the government needs a court order to wiretap communications. To obtain 
such an order, the government must show that normal investigative techniques for obtaining the 
information have or are likely to fail or are too dangerous, and that any interception will be 
conducted so as to ensure that the intrusion is minimized. 

The safeguards for privacy represented by the Fourth Amendment and statutory 
restrictions on government access to information do cot prevent effective law enforcement 
Instead, they provide boundaries for law enforcement clarifying what is acceptable evidence 
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gathering and what is not. At the same time, those who care deeply about protecting individual 
privacy must also acknowledge that law enforcement has a critical role to play in preserving 
privacy. When law enforcement investigates, successfully apprehends and prosecutes a criminal 
who has stolen a citizen’s personal information from a computer system, for example "law 
enforcement is undeniably working to protect privacy and deter further privacy violations. The 

'' same is trae when lsw enforcement apprehends a hacker who compromised the financial records 
of a bank customer. 

As we move into the 2 1 S! century, we must ensure that foe needs of privacy and public 
safety remain in balance and are appropriately reflected in the new and emerging technologies 
that are changing the face of communications. Although the primary mission of the Department 
of Justice is law' enforcement. Attorney General Reno and foe entire Department understand and 
share the legitimate concerns of all Americans with regard to personal pri vacy. The Department 
has been and will remain committed to protecting the privacy rights of individuals. We look- 

forward to working with Congress and other concerned individuals to address these important 
matters in foe months ahead. 


Law En 


Although foe Fourth Amendment is over two centuries old, foe Internet as we know it is 

!> • •. v . * =■ . . 

still m its infancy. The huge advances in the past ten years have changed forever the landscape 
of society, not just in America, but worldwide. He Internet has resulted in new and exciting 
ways for people to communicate, transfer information, engage in commerce, and expand their 
educational opportunities. These axe hut a few of foe wonderful benefits of this rapidly changing - - 

technology. As has been the case with every major technological advance in our history. 
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however, we are seeing individuals and groups use this technology to commit criminal acts. As 
Deputy Attorney General Eric Holder told the Crime Subcommittee of this Committee in 
February, our vulnerability to computer crime is astonishingly high and threatens not only our 
financial well-being and our privacy, but also this nation’s critical infrastructure. 

t 

Many of the crimes that we confront everyday in the physical world are beginning to 
appear in the online world. Crimes like threats, extortion, fraud, identity theft, and child 
pornography are migrating to the Internet The Fourth Amendment and laws addressing privacy 
2nd public safety serve as a framework for law enforcement to respond to this new forum for 


criminal activity. If law enforcement fails properly to respect individual privacy in its 
investigative techniques, the public’s confidence in government will be eroded, evidence will be 
suppressed, and criminals will dude successful prosecution. If Saw enforcement is too timid in 


responding to cybercrime, however, we will, in effect, render cyberspace a safe haven for 
entnmais and terrorists to communicate and carry out crime, without fear of authorized 


government surveillance. If we fall to make the Internet safe, people’s confidence in using the 

Internet and e-commerce will decline, endangering the very benefits brought by the Information 
Age, Proper balance is the key. 


To satisfy our obligations to the public to enforce the laws and preserve the safety, we use 
the same sorts of investigatory techniques and methods online as we do in the physical world, 
with fee same careful attention to the strict constitutional, statutory, internal and court-ordered 
boundaries. Carnivore is simply an investigatory tool that is used online only under narrowly 

defined circumstances, and only when authorized by law, to meet our responsibilities to the 
public. 
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To illustrate, law enforcement often needs to find oat from whom a drug dealer, for 
instance, is buying his illegal products, or to whom the drug dealer is selling. To investigate this 
it is helpful to determine who is communicating with the drug dealer. In the ‘'olden days” of 
perhaps 10 years ago, the drag dealer would have communicated with his supplier and customers 
exclusively through use of telephones and pagers. Law enforcement would obtain an order from 
a court authorizing the installation of a “trap and trace” and a "pen register” device on the drug 
dealer's phone or pager, and either the telephone company or law enforcement would have 
installed these devices to comply with the court’s order. Thereafter, the source and destination of 
his phone calls would have been recorded. This is information that courts have held is not 
protected by any reasonable expectation of privacy. Given the personal nature of this 


information, however, the law requires government to obtain an order under these circumstances. 


ht this way, privacy is protected and law enforcement is able to investigate to protect the public 
Now, that same drag dealer may be just as likely to send an e-mail' as call his 


confederates. When law enforcement uses a "trap and trace” or “pen register” in the online 
context, however, we have found that, at times, the Internet sendee provider has been unable or 


even unwilling to supply tins information. Law enforcement cannot abdicate its responsibility to 
protect public safety simply because technology has changed. Rather, the public rightfully 
expects dial law' enforcement will continue to be effective as criminal activity migrates to the 
Internet. We cannot do this without tools like Carnivore, 

When a criminal uses e-mail to send a kidnaping demand, to buy and sell illegal drags or 
to distribute child pornography, law enforcement needs to know to whom he is sending messages 


and from whom he receives them. To get this information, 


we obtain a court order, which wc 
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sen'e on fee appropriate service provider. Because of fee nature of internet 


communications, the 


addressing information (which does not include fee content of the message) is often mixed in 
wife a Jot of other non-content data that we have no desire or authority to gather. If fee sendee 
provider can comply with the order and provide us wife only fee addressing information required 
by court order, it will do so and we will not employ Carnivore. If, however, fee service provider 
is unwilling or unable to comply with the order, we simply cannot give a criminal a free pass. It 
is for that narrow set of circumstances that fee FBI designed “Carnivore.” 

Carnivore is, in essence, a special filtering too! feat can gather the information authorized 
by court order, and only that information. It permits law enforcement, for example, to gather 
only the enuil addresses of those persons with whom the drug dealer is communicating, without 
allowing any human being, either from law enforcement or the service provider, to view private 
information outside of the scope of the court’s order. In other words. Carnivore is a minimization 
tool that permits law enforcement strictly to comply with court orders, strongly to protect 
privacy, and effectively to enforce fee law to protect the public interest hi addition. Carnivore 
creates an audit trail that demonstrates exactly what it is capturing. 

As with any other investigative tools, there are many mechanisms we have in place to 
prevent against possible misuse of Carnivore, and to remedy misuse feat has occurred. The 
Fourth Amendment, of course, restricts what law enforcement can do with Carnivore, as do the 

statutory requirements of Title III and the Electronic Communications Privacy Act, and the 
courts. 

For federal Title HI applications, the Department of Justice imposes its own guidelines on 
top of fee privacy protections provided by the Constitution, statutes and fee courts. For example. 
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before Carnivore may be used to intercept wire or electronic communications, the requesting 
investigatory agency must obtain approval from the Department of Justice. Specifically, the 
Office of Enforcement Operations in the Criminal Division of the Department reviews each 

*r 

proposed Title HI application to ensure that the interception satisfies the Fourth Amendment 
requirements, and is in compliance with applicable statutes and regulations. Similarly, typically 
the U.S. Attorney or the section chief within the Department who is handling the investigation 
also reviews the Title III intercept request. Even if the proposal clears the OEO, approval must 
be given by a Deputy Assistant Attorney General Although this requirement of high-level 
review is required by Title HI only with regard to proposed intercepts of wire and oral 
communications, the Department voluntarily imposes the same level of review for proposed 
interceptions of electronic communications (except digital-display pagers). Typically, 
investigative agencies such as the Federal Bureau of Investigation have similar internal 
requirements, separate and apart from Constitutional, statutory' or Department of Justice 
requirements. 

If the investigative agency and the Department of Justice approve a federal Title HI 
request, it still must, of course, be approved by the proper court. The court will evaluat e the 
application under the Fourth Amendment and using the familiar standards of Title HI. By statute, 
for example, the application to the court must show, through sworn affidavit, why the intercept is 
necessary as opposed to other less-intrusive investigatory techniques. The application must also 
provide additional detail, including whether there have been previous interceptions of 
communications of the target, the identity of the target (ifkaown), the nature and location of the 
communications facilities, and a description of the type of communications sought and the 
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ofienses to which the communications relate. By statute and internal Department regulation, the 
interception may last no longer than 30 days without an extension fey the court. 

Courts also often impose their own requirements. For example, many federal courts 
require that the investigators provide periodic reports setting forth information such as the 
number of communications intercepted, steps taken to minimize irrelevant traffic, and whether 
the interceptions have been fruitful. The court may, of course terminate the interception at any 
time. 

The remedies for violating Title 331 or ECFA by improperly intercepting electronic 
communications can include criminal sanctions, civil suit, and for law enforcement agents, 

adverse employment action. For violations of the Fourth Amendment, of oourse7foe remedv^ of 
suppression is also available. 

Carnivore itself also contains self-regularing features. For example, because of its 
sophisticated passive filtering features, it automates the process of minimization without 
intrusive monitoring by investigators, and simply disregards packets of information that do not 
satisfy the criteria in the court ’s authorization. Indeed, one of the most powerful privacy- 
protecting features of Carnivore is its ability to ignore information that is outside the scope of foe 
court-ordered authority. For later verification, it also logs the filter settings. In addition, as a 
practical matter, Carnivore is not deployed except with close cooperation with foe appropriate 
system provider. In any event, the FBI does not use Carnivore in every instance in which foe 
court orders a Title SI electronic communication intercept. Indeed, I understand that foe Bureau 
uses Carnivore only In those instances when the sendee provider is unable to comply with the 
court order using its own equipment, or when the provider asks foe FBI to use Bureau equipment. 
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As I testified in April, we face three major categories of challenges in tiding to keep the 


Internet a safe and secure place for our citizens. These are: 

1. Technical challenges that hamper law enforcement's ability to locate and 
prosecute criminals that operate online; 

2. Certain substantive and procedural laws that have not kept pace with the changing 
technology, creating significant legal challenges to effective investigation and 
prosecution of crime in cyberspace; and 


3. Resource needs that must be addressed to ensure that law enforcement can keep 
pace with changing technology and has the ability to hire and train people to fight 
cybercrime. 

Carnivore is an investigative tool that assists us in meeting the first challenge. As we 
have witnessed, tracking a criminal online is not always an impossible task using our 
investigative tools. For example, last year federal and state law enforcement combined to 
successfully apprehend the creator of the Melissa virus and the indi vidual who created a ' 
fraudulent Bloomberg News Service website in order to artificially drive up the stock price of 
PairGain, a telecommunications company based in California, Although we are proud of these 
important successes, we still face significant challenges as online criminals become more and 
more sophisticated. 

In nearly every online case, tracking the online criminal requires law enforcement 
to attempt to trace the “electronic trail” from the victim back to the perpetrator. In effect, this 
electronic trail is fee fingerprint of the twenty-first century — only much harder to find and not 
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as permanent as its more traditional predecessor, fa die physical world, a criminal and Ms victim 

j 

are generally in the same location. But cybercriminals do not have to physically visit the crime 
scene. Instead they cloak their illegal activity by weaving communications through a series of 
anonymous remailers, by creating forged e-mail headers with powerful point and click tools 
readily downloadable from hacker websites, by using a “free-trial” account or two, or by “wiping 

clean the logging records that would be evi dence of their activity. 

! 

fa some cases, the criminal may not even be in the same country' as the victim. The global 


nature of the Internet, while one of the greatest assets of theifatemet to law-abiding citizens, 
allows criminals to conduct their illegal activity from across the globe, fa these cases, the need 


to respond quickly and track the criminal is increasingly complicated and often frustrated by the 
fact that the activity takes place throughout different countries. With more than 190 countries 


connected to the Internet, it is easy to understand the coordination challenges that face law 
enforcement. Furthermore, in these cases, time is of the essence and die Victim may not even 


realize they have been victimized until die criminal has long since signed-off. Clearly, the 
technical challenges for law enforcement are real and profound. 


This fact was made clear in the findings and 


j 

conclusions reached fa the recently released 


report of the President’s Working Group on Unlawful Conduct on the Internet, entitled, “The 
Electronic Frontier: The Challenge of Unlawful Conduct favjolvmg the Use of the Internet.” This 
extensive report highlights in detail the significant challenges facing law enforcement in 
cyberspace. As the report states, the needs and challenges confronting law enforcement, “are 
neither trivial nor theoretical” The Report outlines a three-pronged approach for responding to 
unlawful activity on the Internet: 
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Conduct on the Internet should be treated in the same manner as similar conduct 
offline, in a technology neutral manner. 

We must recognise that the needs and challenges of law enforcement posed by the 
Internet are substantial, including our the need for resources, up-to date 
investigative tools and enhanced multi-jurisdictional cooperation. 

Finally, continued support for private sector leadership in developing tools and 
methods to help Internet users to prevent and minimize the risks of unlawful 
conduct online. 


I would encourage anyone with an interest in this important topic to review carefully the 

report of the Working Group. The report can be found on fee Internet by visiting the website of \ — 

the Department of Justice’s Computer Crime and Intellectual Property Section, located at 
~~ ~ — - In addition to the report, sajW t gyb^ , crim e. noy also contains other useful 
information on a wi de array of Internet related issues, including the topic»of today’s hearing - 
privacy. 

Despite the type of difficulties outlined in fee Unlawful Conduct Report and discussed 
today, the Justice Department and law enforcement across this nation are committed to 
continuing to work together and with their counterparts in other countries to develop and 
implement investigative strategies to successfully track, apprehend, and prosecute individuals 
who conduct criminal activity on the Internet, h so doing, fee same privacy standards that apply 
in fee physical world remain effective online. 

Mr. Chairman, fee Department of Justice has taken a proactive leadership role in making 
cyberspace safer for all Americans. The cornerstone of our cybercrime prosecutor program is fee 
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Crimmal Division’s Computer Crime and Intellectual Property Section, known as CCIPS. 

CCEPS was founded in 1991 as the Computer Crime Unit, and became a Section in 1996, CCIPS 
has grown from five attorneys in 1996 to twenty today - and we need more to keep pace with the 
demand for their expertise. The attorneys in CCIPS work closely on computer crane cases wife 
Assistant United States Attorneys known as “Computer and Telecommunications Coordinators,” 
or CTC’s, in U.S. Attorney’s Offices around fee nation. Each CTC receives special training and 
equipment and serves as fee district’s expert on computer crime cases. CCIPS and the CTC’s 
work together In prosecuting cases, spearheading training for local, state and federal law 
enforcement, working wife international counterparts to address difficult international 
challenges, and providing legal and technical instruction to assist in the protection of this 
nation’s critical infrastructures. We are very- proud of fee work these- people do and we will 
continue to work diligently to help stop criminals from victimizing people online. 

I also note that public education is an important component of the Attorney General’s 
strategy on combating computer crime. As she often notes, the same children who recognize that 
it is wrong to steal a neighbor’s mail or shoplift do not seem to understand feat it is equally 
w - ong to steal a neighbor’s e-maii or copy a proprietary' software or music file without paying for 
it To remedy this problem, fee Department of Justice, together with the Information Technology 
Association of America (FTAA), has embarked upon a national campaign to educate and raise 
awareness of computer responsibility and to provide resources to empower concerned citizens. 

The “Cyberoitizen Awareness Program” seeks to engage children, young adults, and others on 
fee basics of critical information protection and security and on the limits of acceptable online 
behavior. The objectives of fee program are to give children an understanding of cyberspace 
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benefits and responsibilities, an awareness of consequences resulting from the misuse of the 
medium and an understanding of the personal dangers that exist on the Internet and techriujues to 
avoid being harmed. 

Conclusi on: 

/ * 

Mr, Chairman, I want to thank you again, for this opportunity to test? fy today about our 

efforts to fight crime on the Internet while preserving the rights conferred by the Fourth 

Amendment and statute. Ultimately, the decision as to the appropriate parameters of law 

enforcement activity lies squarely within the Constitution and the elected representatives of the 

people, the Congress. The need to protect the privacy of the American people - not j ust from the 

government but also from criminals - is a paramount consideration, not just in the context of the 

Internet, but in general. The Department of Justice stands ready to work with this Subcommittee 

and others to achieve the proper balance between the important need for protecting privacy and 

the need to respond to the growing threat of crime in cyberspace. , 

Mr. Chairman, that concludes my prepared statement. I would be pleased to 

attempt to answer any questions that you may have at this time. 
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Statement for the Record of 
Donald M. Kerr 
Assistant Director 
Federal Bureau of investigation 
Before the 

United States House of Representatives 
The Committee on the Judiciary 
Subcommittee on the Constitution 
, Washington, D.C. 

7/24/2000 

Good afternoon, Mr. Chairman, and Members of the Subcommittee. I am grateful for this 
opportunity to discuss the FBI’s Internet and data interception capabilities and to help set the 
record straight regarding this important issue. I would like to first discuss FBI’s legal authority for 
conducting interceptions on the Internet, and then describe Carnivore and how we use it. 

Two weeks ago, the Wall Street Journal published an article entitled "FBI’s system to covertly 
search e-mail raises privacy, legal issues." This story was immediately followed by a number of 
similar reports in the press and other media depicting Carnivore as something ominous and raising 
concerns about the possibility of its potential to snoop, without a court order, into the private E- 
mails of American citizens. I think t hat it is important that this topic be discussed openly-and in 
fact this was the purpose behind the FBI choosing to share information regarding this capability 
with the industry' experts several weeks ago. It is critically important that, as technology, and 
particularly communications technology, continues to evolve rapidly, the public be guaranteed that 
their government is observing the statutory and constitutional protections which they demand I 
bekeve that it is also very important that these discussions be placed into the context into which 
they properly belong and that the tree facts concerning this issue are made clear. More to the point, 
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that these capabilities are used only with lawful authorization and that they are directed at the most 
egregious violations of national security and public safety. 


Ftrst of all, the FBI performs interceptions of criminal wire and electronic communications, 
including Internet communications, under authorities derived in part from Title Iff of the Omnibus 
Crime Control and Safe Streets Act of 1 968 (as amended), which is commonly referred to as "Title 
HI", and portions of the Electronic Communications Privacy Act of 1986 (as amended), or 
"ECPA", I want to stress that all such interceptions, with the exception of a rarely used 
"emergency" authority or consent of a participant in the communication, are performed under a 
court order issued by a judge. Under emergency provisions, the Attorney General, the Deputy or 
the Associate Attorney General may, if authorized, initiate electronic surveillance of wire or 
electronic communications without a court order, but only if an application for such order is made 
within 48 hours after the surveillance is initiated. 

■V 

Federal surveillance laws must comply with the Fourth Amendment's dictates concerning 
reasonable searches and seizures, but they also include a number of provisions that are intended to 
ensure that this investigative technique is used judiciously and with deference to the privacy of 

intercepted subjects and certainly with deference to the privacy of those who are no, the subject of 
the court order. 


For example, unlike search warrants for physically searching a house, under Title HI and 
Department oflustice policy, applications for interception of oral, wire and electronic 
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communications require the authorization of a high-level Department of Justice (DOJ) official 
before the local United States Attorneys offices can make an application to a federal court 
Further, interception of communications is limited to certain federal criminal offenses. 

Applications for electronic surveillance must demonstrate probable cause and state with 
particularity and specificity: the offenses being committed, the telecommunications facility or 
place from which the subject’s communications are to be intercepted, a description of the types of 
conversations to be intercepted, and the identities of the persons committing the offenses and 
anticipated to be intercepted. Thus, criminal electronic surveillance laws focus on gathering hard 
evidence— not intelligence. 

Applications must indicate that other normal investigative techniques have been tried and failed to 
gather evidence of crime, or will not work, or are too dangerous, and must include information 
concerning any prior electronic surveillance regarding the subject or facility in question. Court 
orders are initially limited to 30 days, with extensions possible, and must terminate sooner if the 
objectives are obtained. Judges may, and usually do, require periodic reports to the court, 
typically every 7 to 10 days, advising it of the progress of the interception effort. This assures 
close and on-going oversight of the electronic surveillance by the United States Attorney's office 
handling tire case and frequently the court. 
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Interceptions are lequired to be conducted in such a way as to "minimize the interception of 
communications not otherwise subject to interception" under the law, such as unrelated, irrelevant 
and non-criminal communications of the subjects and of others not named in the application 


To ensure privacy protection and evidentiary integrity of the communications that are intercepted 
such intercept ed communicat ions are req uired to b e recorded, if possible, on tape or o ther device, 
and recorded in such a way as will protect the recording from editing or other alterations. 
Immediately upon the expiration of the Interception period, these recordings are then required to 
be presented to the federal district court judge and sealed under his or her directions. The presence 
of the sea! shall be a prerequisite for their use or disclosure, or for the introduction of evidence 

derived from the tapes. Applications and orders signed by the judge are also to be sealed by the 
judge. 


W ithin a reasonable period of time aft er the termination of the intercept order, including 
extensions, the judge shall ensure that the subject of the interception order, and other parties as are 
deemed appropriate, are furnished an inventory, providing notice of the order, the dates during 
which the interceptions were carried out, and whether or not the person was intercepted. Upon 

motion, the judge may also direct that portions of the contents of the intercepted communication 
be made available to for their inspection. 


Any person who was a party to an intercepted communication or was a party against whom an 
interception was directed may in any trial, hearing, or other proceeding move to suppress the con- 
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tents of any intercepted communication or any evidence derived therefrom if there are grounds 
demonstrating that the communication was intercepted in violation of Title III, EC-PA or the 
Fourth Amendment, 


The illegal, unauthorized conduct of electronic surveillance is a federal criminal offense 
punishable by imprisonment for up to five years, a fine, or both, in addition, any person whose 
communications are unlawfully intercepted, disclosed, or used, may in a civil action recover from 
the person or entity engaged in the violation civil damages, including, if appropriate, punitive 
damages, as well as attorney's fees and other costs incurred. 


1 he technical assistance of the service providers in helping a law enforcement agency execute an 
electronic surveillance order is always important, and in many cases it is absolutely essential. This 
circumstance is increasingly the case with the advent of advanced communications services and 
networks such as the Internet. Title III mandates service provider assistance incidental to law 
enforcement's execution of electronic surveillance orders by specifying that a court order 
authorizing the interception of communications shall upon the request of the applicant, direct that 
a “service provider, landlord, custodian, or other person shall furnish the applicant forthwith all 
information, facilities, and technical assistance necessary to accomplish the interception 
unobtrusively and with a minimum of interference with the services that such service provider, 
landlord, custodian, or person is according the person whose communications are to be 
intercepted.” 
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In practice, judges may sign two orders: one order authorizing the law enforcement agency to 
conduct the electronic surveillance, and a second, abbreviated, assistance order directed to the 
semce provider, specifying, for example in the case of E-mail, the E-mail account name of the 
subject that is the object of the order and directing the provision of necessary assistance. 

t 

Semce providers and their personnel are subject to the electronic surveillance laws like public 
officials and private persons. That is, unauthorized electronic surveillance is forbidden, and 
criminal and civil liability may be assessed for violations. Not only are unauthorized interceptions 
proscribed, bu t so also is the use or disclosure of the contents of communications that have been 
illegally intercepted. It is for this reason, among others, that service providers typically take great 
care in providing assistance to law enforcement in carrying out electronic surveillance pursuant to 
court order. In some instances, service providers opt to provide “full" service, essentially carrying 
out the interception for law enforcement and providing the final interception product, but, in most 
cases, service providers are inclined only to provide the level of assistance necessary to allow the 
law enforcement agency to conduct the interception. I want to stress that the FBI does not conduct 
interceptions, install and operate pen registers, or use trap & trace devices without Jawiiil 
authorization from a court . 


In recent years, it has become increasingly common for the FBI to seek, and forjudges to issue, 
orders for Title III interceptions which are much more detailed than older orders which were 
directed against “plain old telephone services." These detailed orders, in order to be successfully 
implemented, require complex approaches to ensure that only messages for which there is 
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probable cause to intercept, are, in fact, intercepted. The fact that court orders are becoming more 
detailed is in response, I think, to two facts. 


First, the complexity of modern communications networks, like the Internet, as well as the 
complexity of modern users’ communications demand better discrimination than for older analog 
communications. For example, Internet users frequently use electronic messaging services, like E- 
mail, to communicate with other individuals in a manner reminiscent of a telephone call, only with 
text instead of voice. Such messages are often the targets of court ordered interception. Users also 
use services, like the world wide web, which looks more like print media than a phone call. 
Similarly, some Interact services, like streaming video, have more in common with broadcast 
media like television, than with telephone calls. These types of communications are less 
commonly the targets of an interception order. 

1 he second fact is that for many Internet services, users share communications channels, 
addresses, etc. These facts make the interception of messages for which law enforcement has 
probable cause, to the exclusion of all others, very difficult. Court orders are therefore increasingly 
written to include detailed instructions for ensuring that the privacy of communications for which 
there is no probable cause to intercept is guaranteed. ...... .. 

In response to a critical need for tools to implement these complex court orders, the FBI developed 
a number of capabilities including the software program called “Carnivore.” Carnivore is a very 
specialized network analyzer or “snifter” which runs on a normal Personal Computer running the 
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Microsoft Windows operating system. I, works by -sniffing" the proper portions of network 
packets and copying and storing only rhose packets which match a finely defined filter set 
programed in conformity with the coon order. This filter set can be erdtemely complex, and this 
provides tire FBI with an ability to collect transmissions which comply with pen register court 
orders, trap & trace court orders. Title III interception orders etc. 


ft is important to distinguish now what 


is meant by “sniffing.” The problem of discriminating 


between users’ messages on the Internet 


is a complex one. However, this is exactly what 


omnivore docs. Ir docs NOT search rhrough ft. contents of every message and eol.ee, those that 
contain certain key words like "bomb" or “drugs." I, selccrs messages based or. criteria expressly 
ser out in the court order, for example, messages transmitted to or from a particular account or 
or from a particular user. If.hr, device is placed a, some poim on the network where it cannot 
discriminate messages as set out in the court order , i, simply lers all such messages pass by 


unrecorded. 


One might ask, -why use Carnivore a, all?" In many instances, ISPs, particularly the larger ones, 
maintain capabilities which allow them to comply, or partially comply with lawful orders. For 
example, many ISPs have the capability to “done” or intercept, when lawfully ordered to do so, E- 
marl to and from specified user accounts. In such cases, these abilities are satisfactory and allow 
full compliance with a court order. However, in most cases, ISPs do not have such capabilities or 
cannot employ them in a secure manner. Also, most systems devised by service provide* or 
purchased "oil the shelf" lack the ability to property discriminate between messages in a fashion 
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that complies with the court order. Also, many court orders go beyond E-mail, specifying other 
protocols to be intercepted such as instant messaging. In these cases, a cloned mailbox is not 
sufficient to comply with the order of the court. 

Now, I think it is important that you understand how Carnivore is used in practice. First, there is 
the issue of scale. Carnivore is a small-scale device intended for use only when and where it is 
needed. In fact, each Carnivore device is maintained at the FBI Laboratory in Quantico until it is 
actually needed in an acti ve case. It is then deployed to satisfy the needs of a single case or court 

order, and afterwards, upon expiration of the order, the device is removed and returned to 
Quantico. 

The second issue is one of network interference. Carni vore is safe to operate on IF networks. I t is 
connected by a high impedance bridge and does not have any ability to transmit anything onto the 
network. In fact, we go to great lengths to ensure that the Carnivore is satisfactorily isolated from 
the network to which it is attached. Also, Carnivore is only attached to the network after 
consultation with, and with the agreement of, technical personnel from the ISP. 

This, in fact raises the third issue-that of ISP cooperation. To date. Carnivore has,. to my 
knowledge, never been installed onto an ISP’s network without assistance from the ISP’s technical 
personnel. The Internet is a highly complex and heterogeneous environment m which to conduct 
such operations, and I can assure you that without the technical knowledge of the ISP’s personnel, 
it would be very difficult, and in some instances impossible, for law enforcement agencies to 
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successfully implex a „ d ^ ^ fc ^ 
also depends upon the ISP personal » A , „ , 


particular networks. 


wu ‘ w wra me stnct taWKW of an interception order. The FBI 
personnel to underst and the protocols and architecture of their 


Auofher primary consideration for using Carnivore is data integrity. As you know. Rule 90! of the 
Mora, R„,es of Evidence require the aufheniiclion of evidence „ . fc ^ 

admissibility. The use of the Carnivore system hy .he FBI to intercept and store comnmnications 

provides for an undisturbed chain of custody by providing a witness who can testify to the 

retrieval of the evideuce and the process by which i, was recorded. Performance is aiso a hey 

reason for .he use of Cantivore over commercial sniffers. Unlike commercial software sniffers 

Carnivore is destgned to intercept and record the se.ee, ed communications comprehensive, y. ’ 
without "dropped packets." 


rn conclusion, 1 wauid like to say tha, over the last five year, or more we h ■ 

yeafs or more > wfe have Witnessed a 

commurns, steady growfh it, instances of compute, -related crimes, including traditional crimes 

and terrorist activities which have been pianned or carried out, in part, using the Internet. The 

aMity of the law enforcement community to effective investigate and prevent these ^ 

P-. dependant upon our abiiity to iawfiriiy eoitoct evidence of wrongdoing. As the 

ecomes more comp, ex, so do the changes piaca, on us to ^ pace. We couid no, do so 

-on, the continued coopemtion of our industty p»„ers and innovations such as the Carnivore 
software^ 


i and innovations such as the Carnivore 
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fc forward to working with the subcommittee staff to provide more information and welcome 

>our suggestions on this important issue. I will be happy to answer any questions that you may 
have. Thank You. 
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s jf ,con ? m5tte ® be » or ^ er - And it’s probably going to be necessary for the staff to 

close the doors, otherwise we 11 have noise from the hallways. 3 u 10 

In recent years, with the growth of the Internet, the FBI has encountered an increasing number of criminal 
sfcrims 3tIOnS m W UC 5 cnmxna sub i ects have used the Internet to communicate with each other or their 

. belie y es m ? n y toemet sendee providers lack the ability to discriminate between 
communications in order to isolate the specific types of information that may be authorized to be 

SabS five iS/tolSS? *?* ^ d » signed and deve ?°P ed a program called Carnivore which 

enables the FBI to isolate, intercept mid collect communications that are the subject of lawful orders. 

6 Came r April duriR § {est t imony bef * re *he Subcommittee on the Constitution 
rnl n^ 5 ,^. R ° b rt Com ; R ® vere > who represented an Internet service provider that tried to resist attaching 

the Carnivore program to its network. <uuu,mug 

rewSo !nSt! re r!!S d ? at °”? ° f * e na ! ti p ns ^fg«st Internet service providers, Earthlink, Inc., has 
access servers' to Sl5? S net%v ? rk because attaching the program m the past caused its remote 

Other ISPs have stated publicly that they would challenge an order to attach to their networks. 

While these industry officials have expressed willingness to cooperate with law enforcement to comely 

w Jfcj C0Uft » concerned about the effects attaching Carnivore to their network^ 

" ill have on the security of their infrastructure and the privacy of their customers. 

° n My 1 2 > Attora fy General Re ™ stated that she does not want Carnivore, quote 
to be a tool that is m any way a cause of concern for privacy interests,” close quote. Today's hearing 
provides federal law enforcement the opportunity to address the privacy concerns that have been raised. 

unreL^^ tiie ^ u , esti ° a as t0 whether existing statutes protecting citizens from 

lawS^ mder the Fourth Amendment appropriately balance the concern of 

StSSfi. * d J*" enforcement is concerned that the information needed to keep the 

public safe remams available. Individual citizens are concerned that a sufficient degree of privacy and the 

232 ^eSfofoSLSSSf ’ 1 b£ b u T °{ mod * m cnmmunieatiofs and ^formation 

?£3® V « hon that may have traditionally been kept in a file cabinet at home is now 

foSest I y by a t Urd pErty “ cyber5pace - 1116 hearing today will also address this balance of 


* e Use ofGarnivore » h is important that our deliberations be based on facts and not 





~“W *" «*»««««• ftaPUon, 


I look forward to hearing from all of our witnesses today and Fd now' recognize Mr. Watt. 
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WATT: Thank you, Mr, Chairman, 


I confess that up until about 10 days to two weeks ago, I had paid very Hale attention to this whole 
Carnivore ! project, ( And at about that point I started to get inquiring telephone calls from the media and 
press about what I knew about Carnivore, I don't know much more about it today, and that's whv I want 
to start by praising the chair of the subcommittee for con vening this hearing, because I agree with the 
chair that whatever information we have and however we proceed as a committee and as a Congress 
needs to be based on the facts, * “ 

**X *0 bring to this hearing a level of open-mindedness to try to understand the facts and trv to figure 

1 ^ What diSP ° Siti0n ’ ifany ’ m3y be required by Con ^s, what 

Suppose I would be less : than honest if I didn't say that I have had for quite a while a generalized concern 
about the government s ability to invade the privacy of its citizens. There seems to me to be a growing 
mvelof generalized concern about Big Brotherism that I suspect is being fed by the increasing electronic 


WATT: When the fourth Amendment was passed and put into the Constitution, there was at least a 
leelmg that if the government came to do a search, it at least had to bring a warrant and present it to you 
or come and fcick-in your door. 1 ; 

And in some of our communities, we have always had probably an exaggerated fear of whether the latter 
was likely to occur than the former, and it’s probably from that perspective that 1 have always had this 
kind of genera lized concern , J 

* 

But notwithstanding that, 1 will make every effort 1 can to try to be objective and impartial about this 

1 rw ■ e g f ne f ai commen , ts P°' mt U P the context in which we're operating and point up the 

importance of having such a hearing as this. * * 

From my perspec tive it’s good to see a number of people, who as long as the unwarranted searches and 
wiretaps and invasions or potential invasions were being visited on parts of the community that they 

concern 



opportunity to look into that and evaluate it And I welcome the opportunity and thank "the chairman for 
convening the hearing for that purpose. 

Thank you, Mr. Chairman, I yield back. 

CANADY: Thank you, Mr, Watt. 

Mr. Hyde? 


HYDE: Thank you, Mr. Chairman. 
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8 Very ^P ortant bearing, as attesfed to bv the interest shown with so manv neoete 



sK? h Y'* d *"***& - 

solE “ ^ and m P rotectln S constitutional rights. I hope it get a good 

Tliank you, Mr. Chairman. 

CANAD\ ; Thank you, Mr. Chairman. 

Mr. Conyers? 

CONYERS; Thank you very' much, 

equivalent of wiretaps on the Internet. onitrcement would develop ability to conduct the 

4 

A 22S RS: Th V lew ? abom Ca rnivore comes at a time when there is growing concern about how ms m. 
«ad out ""*• ^ « h “ *“ «• ™ - 

So where I come from in the beginning on this is that, are we minimizine the intervention „t 
non-mcnmmatmg communications of a target 

enforcement access to the communication of non-targets 9 And I think this is a verv 

that has to bejesolved. h * mmx tms 3S a ver T important question 

pen-registers, to the pen-register 

the infonnat^^^S^;^? ** ^ enforceffient ca « *** * «P«*«P & get 

PkCe a -° ngside t the {el ^ hone a « d snail mail as a central means of 
enforcement ~ taw enfoiSS I S^moS ! to be 

f ° r i!leSaI "”** “ ^ h ° pe *" ^ « inspire witSea°Sig y 
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«^ 1 !* 1 thlI f ^ * S is exactiy {hc ty P e of approach that we need to have when we’ 

looking into a new arena of your legitimate needs for surveillance of suspects. 


were 


And I thmk the more the public knows, the more the Congress knows, and the more light that is shed 
flS! tJ ^ entS , te WJ 1 be , rendered - A * d so, I do believe that the FBI has engagedTn this 
well as that of1he™S’s° n t0 ° ’ t0 imi? the reV ‘ ew of third ' part >' documents as well ~ or content ~ as 

w e * SOme , le £ itimate questions that need to be asked. One, is this new technique 

XSv £S^? ? *S e */*?*?£ W mt0 m ***“ m 1 did not have when I was a United States 

totally Lw en^onmtS' An t ^ approval, we had pen registers, but this is 

reSoLSt^ro J lnT d ■ I t' thU ? C C at tb f hBI has t0 s . te P S'ngerly, but we all, obviously, have 
responsibility to engage in legitimate law enforcement activities in terms of surveillance 


is a 
a 


^Another way to phrase die question is, who reviews and controls the appetite of 
Carnivore? I think that that is really what the purpose of this hearing is. iP 

;^ d 5* w f §°f to the new arena of privacy, I think we all have to recognize how complex this i 
ent tretv. Arco far fhaf I u« } «t tA * - 



is m its 
ve 

Government 


yel ,hey s,i " c * a * pnvacy fa *• «“*»«*» 


law d eXrce5?nn« C (f^° S f S res P°»sibUi«es of the commission would be to review the activities of 

taw enlorcemtot in terms of pnvacy and its impact on privacy. So it's not just commercial bm if« .)« 

S^SToo^atnot hfir^ e ? forCem f en v a br « ad : rari ghig privacy commission. And this is one thing that 
kro the lm cemu^. 3fy fa$hl<>n ‘ but iR a steady * {hou S htfu? fe shion and set the tone as we enter 

So* with that* Mr, Chairman, I want to again thank you, 

I look forward to the testimony of the witnesses* 

CANADY: Thank you, Mr, Hutchinson* 

The gentleman from Alabama is now recognized for five minutes* 

BACHUS; f thank the chairman, 

l^A^A 0b :r s f y , wbat w f have here is that technology has outrun the Jaw. We have a Internet exnlosion 
I have two concerns that I would express to you. One is that we have a balance between legitimate law 
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Sknce men£ ReCdS 8nd thC ri§ht ofprivacy ’ that we **y to mamtain that balance, which is a delicate 


The second is that we have a balance between our different types of communications. Because if we have 
certain types of communications where we ha ve the potential to monitor everything that goes through 
fS wu ha r 6 ? lhertyp f ofcommumcations drat we're limited in our surveillance, criminals are 
wn bc $ e fir f ° nCS t0 , f *S ure out what 13 tbetr safest mode of communications. And sooner or later 

tvpeotou^ t>Te ° f t COmrnUnfC3 ?°? S but n0t a !ot ofre ^ctions in another 

to of co^SSka * CnmmaIs are « om ^ to raove t0 the least restricted or the least monitored 

/ 

And of course we ve got to ask ourselves what level of monitoring do we as a country' want to have on 
private conversations, to achieve what level of surveillance? ? on 


v^nrW ’nf'^ !t me b lve y°V an example. Today - and tins is an example, sort of, quote, "from the old 
nackf *° da % co , msng wie country, Federal Express packages are randomly opened, UPS 
packages are randomly opened, but U.S. marl is not. 1 mean, the mail is not opened. Now criminals have 

“V?? the .f a ^ st way of «? ai5to § something in the United States is not UPS or Fed Ex 
or pared post, use the U.S. mail. The same going out. They've adjusted. They found out where the 
loopholes are. They found out where the least surveillance is, and thev've gone with using the U S nHl 
to send things, because they are not randomly checked. ' 8 Smg mt Ub * nm] 

oJfn^ m r alS 2re P* 0 # t ?„ fi 8 urc . out » sooner or later, I would think - and my question to vou, aren't thev 
gomg to figure out — the illustrations you have given us is that you can take a work like "bomb ” anr! vm\ 
can search the internet for bomb. Well, aren't our criminals - aren't terrorist toLtfnce, St Sev 

! »K Ca 1 10 USe 1 j e word " bomb? " 1 mean * won't they figure out to use the word 

ot£ wo^ P Wo5t ' AS t ° PP0Se l t0 exp!osive device > won't they come up with some kind of 

ba£ah?f^ 3 W3y -’ bey ° r R , d y0 \ US i ng k ? y words > t0 get around *is? And vou’re 

oasjcauj left on sweeping the conversations of law- abiding citizens? How do vou net around crimindc 

s^m. 8 ° mg t0 ?t 10 tWS SyStem? Pney ' re go5ng ‘° be ^ e a* *o ada Pt, tohlttomZ Sethk 

jAad at the same time my other concern is this; I've heard all sorts of assurances that this won't fall in the 
8 band t t ? at t iere are safeguards. Well, today there are safeguards on FBI files. FBI files only 
certain people have access to those files. Only certain people can have possession of those files Only 

? an J ook m ,*j} ose fl5es * Yet a few years ago, we found out that 1,000 of those files were 

where we* h^ 1 TiffS do we J» VC * at we ' re nQt 8 o5 “8«> have another situation here 

\here we have, like FBI files, that they got out of the restricted area and that people viewed them and 

perhaps utilized them for things they weren't intended to be? P P em and 

thev've SdSSSf fe * t - at Au aVe ab0ut . mS a 8 ents who pull people's income tax forms and 
me> ve used them to go up against their wives m court or their ex-wives on child sunnort matters or 

£SC?f aga !f someone who was dating their girlfriend to try to embarms them. And there've 

^ * asfured would nm Sf a ff S dl f Wltb fi, f or what confidential infomiation, which we 
their ? d i? ! f 1 ~ d be , restricted, where someone used those files witliin the IRS to 

uieir advantage or to embarrass someone else. 


intended. 
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So I'd ask you, how would this be any different? How is this any different from IRS information which 
toJ “ would not be disclosed and has been in any number of cases? How is this any different from 
FBI files who found themselves being used for political purposes? 


Thank you. 


CANADY: Thank you. 


We w'iJJ now move to hearing testimony from our first panel Our first panel will address the Federal 
Bureau of Investigation’s Carnivore program and its role in federal law enforcement in the digital age. 


On this panel first we would like to welcome Dr. Donald Kerr. Dr. Kerr is an assistant director of the 
Federal Bureau of Investigation and director of the FBI's Lab Division, which develops surveillance 
and tactical communications technologies. 


Next we will hearing from Larry Parkinson, the general counsel for the FBI. 


Following Mr. Parkinson will be Kevin V. DiGregory, Mr. DiGregory is deputy associate attomev 
f? ne £^, at & e Department of Justice. Two members of the Justice Department's Computer Crimes unit - 
Mr. DiGregory is joined at the table today by Christopher Painter, the deputy chief of the Computer 
Crime and Intellectual Property Section at the Depai tment of Justice. Mr, Painter will not be making a 
separate statement, but will be at the table with Mr. DiGregory to answer questions. 


I want to thank each of you for being with us here today and for patiently li stening to our open ing 
statements. I would ask that you do your best to summarize your testimony in five minutes or less, 
although I don’t think anyone will insist on strict adherence to the five-minute rule. And without 
objection your full written statements will be made a part of the permanent record of today's hearing. 


Dr, Kerr. 

KERR: (OFF-MIKE) grateful for the opportunity to discuss with you our program for interception, lawful 
interception, of information on the Internet and data networks. 


As you know, the use of computers and the Internet has grown rapidly and has been paralleled by the 
exploitation of computers, networks and databases to commi t crimes and to harm the safety, security and 
privacy of others. Criminals use computers to send child pornography to each other using anonymous 
encrypted coramimications. Hackers break into financial service company systems and steal customers' 
home addresses and credit card numbers. Criminals use the Internet's inexpensi ve and easy 
communications to commit large-scale fraud on victims all over the world. And terrorist bombers plan 
their strikes using the Internet. 


Investigating and deterring such wrongdoing requires tools and techniques designed to work with new 
and evolving computer and network technologies. The systems employed must strike a reasonable 
balance between competing interests: the privacy interests of telecommunications users, the business 
interests of service providers, and the duty of government investigators to protect public safety. 
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LTtaS 3*£ »? Pv ™ mSSfo^r^'^ */ T Sf,?? mk mail ^era*™. 

Wt s,pm*^ 

iittS’abouuie^ Carnirore^Sf ^ what?s?t h*™ ?' w ' c ? n ™ unicslio ” s ■» requires me to talk a 

some in the networicitig industry wuld ra!U pack«?u ! fR?ttat k sometSi^hSo ^ f “ ch ®* "’ ha < 
packets using the addressing mformatinn ft f th* i ^ somet l mg a ^le t0 P 10 ^ out those 

gtajacc^Votteb^^^^ 

that's passing through that service provider's portal oraerto get a part of the traffic 

£?£ 2m WC requke a court order - court order is specific to the numbers we can tarnet if™, 
in feci, full ° f& peR ‘ register ’ trap * arid “ace,' or, 

not authorizeVb? a court°order t?*® ° f Surveillance with this s >' stem - That’s 

wK f aSk ’ 

Second, we’re able to also sort on the "to” and "from" line of the e-mail A r „t ,, , ' , , , 

about that is think about the piece of standard mat! mat ifs l^Sk *1 °!f besf wa > J t0 L thmk 

autb^edtoopTh^ 

what Mwanld t * all0WS US { ?/ e ^' er coment > we>re a hle to open the envelope And in this case 
wnat we would then do is capture all of the packets that relate to that e mail uZ71t* ' 

soble medium - magnetic .ape or some other stable medium - for iaS^semWy .SkX’ 

technical people from the Internet service provide? ’ d ’ m vcry case * b >' ORC or more 

place, is not ! ecords 5 »*» or puts the system in 

^nsibir baWy alS ° - ***& technicta^&^rfyK^ 


Sadt^rter? * **“ **** ° R SitC Until it<s recorded and ^turned, either to a field office 


or to us at 


And the installation, to put a picture in your mind, looks very much like a desktop 
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often bolted into a rack like other equipment at the Internet service provider location but an ,* mnnrtant 
difference is that it has no keyboard, no mouse, and, in fact, it's looted up, as far L L “nSS? 
SSfTi wb ?f e - tbe ma gB e hc media are written, because this, in fact, is the first step in the evidential 
rnfwffif d t S0 $ ® im P ortanttha |, !t be locked, access only provided to an agent who comes on site to ° 

a " d ,reat! k j “ lite we ““ phy8ical evM «* ta <™» »f 

An important ^further point is that we produce a record for audit of the filter-sett in 2 and the ermfiatw-ni™ 

ZSJS^ ^ the *“** Pew tbnes ^ at & was used * that was done by the people doing the^ 
installation. We ve now grown concerned, because of discussions that have beenongoing that we record 

trieVto^Sfe 0 !?? 5t ,rff h n Gt l Cated ’ ff d so we now ’ & fact * override it with a hash, so that if someone 
tried to rewrite that audit trad, that could be detected, someone 

*"'• ’ ,econ, ' s part «•* «*-*» —i 


dvH«nS2f<^h«f L^vt k ^ T-o r m SUS fvT d 110 ? n i shou]d that There are both criminal and 
federal fe mw ?,K £. » ^ ® ar! r hhct ™ mc Communications Privacy Act installations. It's a 
tvdera! felony, calling tor a prison term of up to five years, a fine, plus possible recovery of civil 


And so I don’t think our technical teams installing these devices are going to risk their lobe thoir .Worn,, 
and their future by attempting to operate this equipment improperly ft th? ISP j mtegnty 

installadon £f foS? w* '?’ Ch * We « f ect the bus fi ss ^crests of the service providers: every 
StefeS To d°o it 


as raan y_°f the laige ones do, ro ftiey can respond to tte 

ordhr aTlue° r { k em , to . do tbat and simply provide us the information which is the subject of the court’ 
order and we never do install our equipment. We also, in those cases, bear some part of the eoS of doing 


Sirnrtm? SIS * 8, 1 th ? **? «“«» numbers of them estimated in the United States at the 
SEfISK b US , UpWardoli P’ 0 , 00 / not ali Jarge, listed companies. Some of them are mom 
sophistication th?r4° n 1 ha ! C la JF am0imtS °f ! equipment and a great deal iff technical 

SSrt oSilf ^ SltfS?* ne ^ or f • 11 fty recdves information tlirough the filler as authorized by die 
h ifan?^ md no r COITimui ? 5Catl ons over the network. So we don’t believe that 

e-mail to customers. rf th the pr0per functl °nmg of the service provider's equipment delivering 

tb?rLS ment * iS remo . v . ed *»»n«iwteiy «pon the expiration of the court order. It does not 
oC to leave ftS^koe P ^ 15 ^ any0ne who caa get b *» d mak « a decision on their 
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&cia U1 tflc loun orQer - m a sense, it s automatic minimization up front, 

Mofficetm . tataZtenlf! « w*h 15 • J 1ien ?>' m « sa S« are reassembled back at the 
shoal**. ifs, in SlSSafteS: faCt ' 1DCOrKM,y or “dvertendy captured tafomtation we 

And it s really no different than the minimization that occurs first real-time on a Title Iff wm»tan ^a *u 
subsequent on the recording of that wiretap to be sure there's nSJ th£e St shSulStb? P *“ 

RpwJa^ewJeoce with an appropriate first step in the chain of custody. We're trying to maximize the 
opportunity to properly gather evidence, authenticate it and foe able to testify that «2X 1 . 

nor subtracted nor altered that which we’ve captured. ^ e Vfi neither added to 

to S fh be f auS f lts 3 c °rnbination of software and hardware. And so we can in fact adjust it 

to fit subsequent court orders, and we can move from one case to another with it. ’ J 


5Sd SKSlS ^ ° fCOmmerCiaI SOfhV2re t0 reduce risk and «»*, and 


as I mentioned before. 


Finally ; one of the things were going to do, as a consequence of our discussion over the w I s m(W ,k r 
with people in industry, staff and members of Congress five of the nZrtZt 8 momhs ’ 

number of US. attorneys some 1 5 federal and ^ut *L£ « , pai1ment of Jl!Stlce components, a 


thafwe n? e a w'w!f- S ri f! < now *? «ad«rtalce an independent verification and validation of the software 
w Se ' * ? re 8° ,n 8 t0 do « with academic members of the team as well as industry mf mW TS 

SBoSS gomstoc “ f ^ 

w.11, m ft*, do those things ft* we Jy it will SSL 

Our year-to-date use of this tool, that is this present year — the first three mzarrm nCtk« * 

deployed it some 16 times. It’s been used sixcnminll Sscs mdm 

ofthose were simply pen-registers, some involved Ml content. None of those cases have been b 

numbefftls reoortSIn th^ t0 d f ta ? ls , toda >'> but . r probably of interest that it’s not a very' large 

aSP-l^ 

and to target it precisely and well at those that the court orders. authorized to use this 
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Thank you very much, Mr. Chairman. 


CANADY: Thank you very much. 


Mr. Parkinson? 

P ARKJNSON: Thank you, Mr. Chairman. I do not have a prepared statement. PH be very brief. 


I want to echo, first of all, what Dr. Kerr said, and this is ~ despite its unfortunate name, this is a tool that 
is very surgical. And I think Representative Hutchison had it right, that this really is a minimization tool 
And PH leave the technical aspects to Dr. Kerr. 


What Pm here, primarily, to emphasize and Pm delighted to be here and answer any questions that the 
committee may have -- is to emphasize that there -- the FBI and the Department of Justice have a true 
commitment to the rule of law. And I want to respond just briefly to the notion that we have deployed this 
system without controls or without proper authorization. That is simply not the case. 


P ARKINSON: We are also not saying. Simply trust us, we're the government. I think we have - we're not 
naive. We have - we've had enough situations in the course of our history to know that that's not enough. 
We have significant oversight, both within the bureau, within the Department of Justice, and most 
importantly, within the judicial branch that overseas deployment of this device and any other surveillance 
device. 


In addition to that, we obviously have vigorous and appropriate congressional oversight. 


So that's why Pm here. Pm happy to answer questions. And I just want to emphasize to you and to the 
American people that this is a tool that is deployed rarely and it is never deployed without a court order. 
And we do not deploy it in a way that exceeds the court order. 


It is very discriminating, and I hope that this gives us the opportunity to explore that and give some 
comfort to the committee as well as to the American people. 


Thank you very much, Mr. Chairman. 


CANADY: Thank you, Mr. Parkinson. 


Mr. DiGregory? 


DIGREGORY; Thank you, Mr. Chairman. 

Mr. Chairman and memb ers of the subcommittee, thank you again for allowing me th is opportunity to 
testify about the law enforcement tool. Carnivore, and the Fourth Amendment. 
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We have seen, as Dr. Kerr has noted, magnificent growth of the Internet over the last 1 0 years and it has 
^tL^S^r“ Ze " S - 0Ur bUSinKSK and for *» d « ««» to hold Edti 

The Internet has spurred a new and thriving economy. Many businesses have prospered by providing 

imnmvftfoTS? 1 ? ^T-^irri^! 1 the Internet. Others have assisted in the building, maintaining and 
anf ^ Internet has given people jobs, supported families and communities, 

Sr ^ Kss/ ,or ^ fcrthe worid - The totOTa hM ^ 



J >7 7 — tiiia lUfctwiVOi UHUl, J&VCn 1H ttlC 

short existence, we have seen a wide range of criminal use of this technology. It has 
besn used to commit traditional crimes against an ever- widening number of victims, 

toem«7tself th0Se Cnmraa!s mtent on stt2ckin 8 and disrupting computers, computer networks and the 

In short, although the Internet provides unparalleled opportunities for Americans to freely exnress ideas 
ualso provides a very effective means for ill-motivated W>n s to breach the pricey and seSJ of 

wo a rld &£???“ **K d f in W S WOr!4 are be «^S to appear in the online 
Memet * ^ ’ extortIon > fraud ’ ldem!{ > r <**& ^d child pornography are migrating to the 

* 

2fofc™ addressing pri vacy and public safety serve as a framework for law 

? h5S n 5 w forumfor cnrainal activity. If law enforcement fails property to 

eroded* ^S^lSnS^S ! m !f St,g f 1Ve ^clmiques the public’s confidence in government will be 
eroaen, evidence will be suppressed, and criminals will elude successful prosecution. 

* t00 /' mid ij ? responding to cyber-crime, however, we will in effect render 
authorized govemmcT sSl-eSKe to °°”“ n ™ icate and «* «i™ without fear of 

Proper balance, Mr, Chairman, is the key. 

hd5 SSSI?^SS CarfllVOr " , *• tmth ° f 1 the matter is tiiat Caf aivore is > in «•»* 2 tool that 

our obligations to the public to enforce the laws and preserve public safety, we use the same 

attStTon to e !?5S T* ^Hods online as we do in the physical world,with the same careful 

auention to the strict constitutional and legal limits feat are imposed upon us. 
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Carnivore xs simply an investigative tool that helps os to investigate online in the same wav a. in ih, 
enter, 03 ^ d 3nd Cn8b £S US t0 ° btak ° nly the ^formation ^ are authorized to obtain through a Jourt 

To illustrate: Law enforcement often needs to find out from whom a drug dealer for instance i« 

is •** his “ is “ ~ <i £22. 


2K52u . a o, c S“ h “ s " ,e ™ amm ° u ,r * p 

° r * Chil<! I ’ om W hw ”“y *» j>' a “S Italy <0 an e-mail as 

253 tSI a?ffm?c ra ^ nt r U f S a ! rap ^ id traceo / a pen-register in the online context, however, we have 
toirnd that at times, the Internet service provider has been unable or even unwilling to stmnlv thie 

mfonnation. ft is for tlxat narrow set of circumstances that the FBI designed Carnivore Law enforcement 

Sf 1 ^ responsibility to protect public safety simply because technology has changed RaS 

mfe?afestot!e£l y 7? e f orcen f Rt will continue to be effective as criminal actfvdn' ’ 

migrates to the Internet W e cannot do this without tools like Carnivore, 

SdSand ^vA2S^? >eC *lf flherhl8 , t0oi 7 at can « ather the Mfonnation authorized by a court 
onlfxhet f i ! t n ‘ 1 pemHtS law enforeement, for example, to gather, pursuant to an order 

Sv humSS Snt d Sff‘ ss ° f P e f ons With vv 'hom the drag dealer is commimicating without ai lowing 

outside the scope trf Ae^court ^^ n - orcement or servicc provider, to view private information 


In other words, as I understand it. Carnivore is a minimization tool that permits law enforcement i 
ompiy with court orders, to protect privacy and to enforce the law to protect the public interest. 


Sptariig. 15 ’ 35 Dr ' KeiT haS n ° te4, CarBivore crea!es ® audi{ trail that demonstrates exactly what it is 


t0 7 s \ there J are ma »y mechanisms we have in place to prevent 
enfolSmenr c ?nM Amendment and the courts, of course, restrict what law 

SfSSL aSSX im M ” , ™ re ’ “ i0 “““"V of Title HI and 


Sis “f * “Urts For <Wpte, bcfcn, 
digital display pagers, the requesting investigative agency must obtain approval for Ife TitAl 
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application from the Department of Justice. 


Specifically, in the Department of Justice, the Office of Enforcement Onentfonc in <k» r« • , - 

ZXSZtEEl?" * 8ira 

Justice approve a Title m reouest iS™f T , the mvestigative a g enc >' and the Department of 

but exacting standanfc * ^ * o{coarse ’ be a PP roved b >' proper court using familiar 

violating Title m « the Electmnic Communication taSSS?i^Kd«22 f" 

SSS'on1^a^g.“' F ° r Foimh TSZSSZSZ*. 

SaSoi liXTS 

puSiclv Ss2iMaMd !ofatet « M >» he A report generated from the review will be 

"SSt^ssa Ssty's aspec,s of,hc 

DIGREGORY : The Department of Justice has provided the committee with mb cm „„.v. 

m. Painter and I are available to try to answer any of your questions along with the rest of the panel. 

Thank you, Mr. Chairman. 

CANADY ; Thank you very much. 


been very' helpful to us. 


testimony 


I m going to have a few questions and other members will have auestiorK Tdn ■««»«* o**u * * * 

P^Me m wbS W Pn>babl , y " 0t ,he !hat '« w*" 1 to'i *. » m would a?k' yi“ i to 

ES J£ • nUm res P° nses t0 any additional questions that any members of the co imliZtiw 
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Let n f" ha . vin S saidthat * !et me §0 over some ground that l think you've already covered eon«™;»« a 
use of Carnivore under the pen- register or trap-and-tmee authority y concerning the 

When you re using the pen-register or trap-and-trace authority, would you ever obtain any letters or 

° t ier than {hose .^ at maJce U P an e-mai! address, such as MnSmith@home.«>m? In other 

autSritv^hil'i n cuSJa ih mM Z° U e J er m 4 ake 3 rec i uest > under tlie pen- register or trap-and-trace 
authority, that included the capture of words or sentences other than the e-mail address? 


K£RR: The answer from our side in terms of how we set it up is that if it’s a pen-resister order we onlv 
get the two address and we capture nothing else, 8 raer * e on Y 

PAINTER: And I might say also that the — even die subject line we consider to be content and that 

mro^a.ion , hai soi= ly , J^K.'USho.e 

e-mail address when you re using the trap-and-trace or the pen-register authority, 

PAINTER: In the electronic communications context, yes, that's correct. 

CANADA . Let me ask you this: in your view, does federal law enforcement have the authority under the 
has visifed? r ^ l ° CaptUre S0 ‘ calIed lJRL addresses, which are the addresses of the web sites a person 

mSS 2 <L address - the URL addresses are not really what's contemplated under the 

f Ute ' What K u re taIbn S aboul there is ” I mean, it could - it's possible it 

smssssr ical,y KmHs * ,o a ^ s 

CANADY: If you would. 

l! S dl h !i! hat 'j i Ve T g l°? P T L t J ere , are services » such as Hotmail, where U have to 
£ Jf w f, b f a S e fatten look for the authenticators and other indications that it’s an e- mail service 

dmftclnture SS.Sc 5 Sh ^ iTf t0 Simply tbe e * mail thafs Provided through that serviced 

web Sf we rilrict whdd U f ^ H f? et * W ?, are ” ot m{er l sted in what they do when they surf the 

weo, ana we restrict what we do only to that e-mail traffic over the web page. 


CANADY; OK, 


Now, in your comments. Dr. Kerr, you indicated that Carnivore has been used onlv a few times I think 
1 6 was the number for this year, is that correct? y raes ' 1 


KERR: That's correct; 1 6 times this year. I think about a total of 25 in the life of the 


program over the last 
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two years. 


CANADY: Well, over that same time period, how manv Title III intereente nn ^ mail « 4 
done not using Carnivore? y intercepts on e-mail would 


you have 


5™* used Ca . r f ivo, " e and earlier versions of the same technology, and in some other csw 

commerciarproSuo’ ^CaSTOr^vS kfecfto eeTsomeofl th” ^ f a !?^ hat J* ®? ved &o» the ’ 
bnefed you on earlier, because tire commercial product had been deve topld quitl anSr pt^oS ' 

i 

Fhnfut^ Eketb * sare us . e£ * hy the service providsrs'to monitor the quality of their sendee In that „„*» 
more dSth!SigS^°° What feey Can ° bscrve - In our case > we *« limited and need the' 


CANADY: My time has expired, but by unanimous consent, F!1 have three additional rat 


minutes. 


Let me follow up on that, if- let me change, given the limited amount of time, to a different subject. 

SforSmlrif 6 >' 0 u . C 0 nten 5 P^ted allowing the use of Carnivore by other, not onlv federal law • 
enforcement agencies, but state or local law enforcement agencies? ’ } Iederalla * ' 


enforcement 1 we u , secl 11 on a{ 5ea sf one occasion m support of another federal law 

enforcement agency. We have not yet brought it to the ooint where we kA.h i. Ja 
oi providing it to state agencies ' P e wc wouid be 5alkm 8 ab ^ K w terms 


Su2araKSw S&SS”in n ^ 1 ref<! ™5 c . t o.a media report that Earthlink was required to 
cSSnmTo “ ° ne msto “- Anti *>“* *>• of i« outwork to Sash and i « 

Now, from your comments, Dr. Kerr, I understand that that just shouldn't harm? « *m i;u u 
comments about those reports and what actually took place' there ^ ^ 

Earthlink, lomng of an ISP, and whether you've had other complaints simi!a?to kat maSy 

^S'et^than What n W ?- doi !, try \° giv€ you somelhi »g for the record that’s more 

compelled to mo^ahe?d 8 S Ek V™ f y Wi f^ Wen “° Earthlink they were ultimately 
tried 1 to pm to£a 7 P ^ 10 d ° 11 software that they essentially 
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2*2^ & S'^SaSiSS? l0 " 8 has Car ” lvwe 01 so “ 

ago, but in t Jms 'SlS’crn orfS^d^l’o^Stlow , IhJhatoTywf™' * h ° W *"* ! ' care 
this yey J OTOTmga^g to theSj J'eSf SSoSto” f 1 6 of fcm 


WATT. It seems to me that such verification would have taken nlsee tnm. r _ _ 

rate pubhc concern or legal concern, ak p ce at some earJser stage, not 25 cases 

Jh e essence of the development program, of course, is that you do learn is vmt ,w.t™ * 

WATT: What products - what properties did it not have that you were looking for? 

KERR: It didn't have the same discrimination caoabiiities It didn't i™., <u„ „„ , ... 

audit report and report on configuration that sve require. ' d “ * h sarae ablht >' to Provide an 

* 

administrative review. * quesl,oncd ' “ faCt ’ m that c ™stance than they would be in any internal 


CANADY; Hie gentleman's time has expired. Hie gentleman will have 


three additional minutes. 


is yowaSS™^MfoBpS 8 ta<SS°, pho nT™^dtS^^ < ’ t ^ rbcMCO ’^ m y° t 
KERR: That's an area that's, in fact, in a state of change today. 


one company or 
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WATT: Who's changing it? 


KERR: Yon did, sir... 


(LAUGHTER) 


... in that the... 


WATT: I think fve - you being Congress, I take it? 


KERR: Yes, sir. 


WATT: I think I voted against this bill, as I recall, and still have 
you. 


some concerns about it, to be honest with 


But go ahead, I'm locked with everybody else for that purpose. 
KERR: Sorry. 


Some of my colleagues know this better than 1, but the 


point is, the Communications... 


gii°“ ld iireCt “ g '° f * rki " s011 ' He ' s ,he 8“ eral ““"*1. He should know 

Or Mr. DiGregory, I didn’t mean to beat up os the technician here. Fm just... 


DIGREGORY* In its most basis sense, as I understand it, the telephone tap is conducted at the nhnr 

nnmK y S'? reStT ? ed t0 th . e ^ ividuaI Jine which you wish to tap. Whether you wish to obtain 
numbers dialed, numbers coming m, or whether you wish to obtain content. 


y °“ _ h0W wWl lh « CWW» h» for 


DfGREGORY: Now, well go back to the science side. 

KERR: Not to tty to confuse you by switching back and forth, but the telephone.. 
(CROSSTALK) 

WATT: Fm pretty confused without you switching back and forth, but go ahead. 
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sa sSfSs w bas “ !»««% 

lntercept. It s a so-called packct-swiicfi ed So* S S, S'? ,0fB ’ ttat “ Ve ^ » 

m ortler » *»>* a phone call fora my house to votm md tS if f leas “S « circuit 

conversation, our private circuit. ' ’ n xm s > ” > ou W ‘H, for the time of the 

WATT: Let me stop you right there, because my light's going to go off- has already gone on. 

luKyTn^ 

(CROSSTALK) 


vi'vjN **> 


fa477 


KERR: I JI give you my view and then.*. 
(CROSSTALK) 


CANADY: The gentleman has an additional minute. 
KERR: ... Ill stand corrected by my colleague. 


belief, from my perspeftlle^thS 1 ^ ¥ s becay se of the correct 

appropnate analog to the telephone number ** “ ^ 8 USefoI and 


But perhaps, Mr. Digregory or Mr. Parkinson would like to add to that. 

at ? d k > appropriate also to point out that there are gradations of 


*f them's a higher^ of atS3SSn £ d£JZ£^ Vh T *?**» « f 
the courts, dependmg on what sort of intrusion vouS alHnSnm d . hl #? r Ieve35 ofi authority 

e to move it up a notch or several notches to a Title ffl authority. d t0 go ^yqnd that then w 


tn 


WATT: Tltank you, Mr. Chairman. 
CANADY: Chairman Hyde? 
HYDE: Thank you, Mr. Chairman. 




privacy. And when you see some of 
to wonder and to worry. 
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W. licst i™« lh mfonmUonthM m> 

later, mildly critical of what ke did, P wMch doesn't g» to talteS ropro seS ° “ 1 “ m,!t 1,5 8 


A JcS$ CDIIip^illlg C3SC( I CSSSj IS OVCf the SO^C^IIcd PllCfifStS WllCr£ thf? I'ltv wa«n T t Jtr»nrvtr J < , . 

ones sense of privacy was — took a heating T *h™,M *u&t a a , u wasn t breached at all, but 

about how th is culture of pri vacv~ wSiJSt* Sffi Ajld , so ’ ? e / e are People who are skeptical 
e 01 pm acj how P° rous * 3S - doesn't call for an answer, that’s just, kind of 


comment 




criminals? 


DIGREGOR\ «. Well, I think that terrorist cells and organized crime can me inf em+t * «. >* 

can use e-mail to communicate And simnl v ih*> , temet t0 c ^mumcate, 

i&SSffigSg a “«* - « ™ edSette^ft"" 

are being called by the organized crime figure or thKgtoffiS" re8BtW ^ ti0X nUmbers *“ 

Sled infhSS?f f fa ?55 as( i ns >' ou have for not letting the Internet sendee providers gather the 
requested information? I take it they have made themselves available to do that for tL r»!^t t 

some of them haven't. But what are the reasons why you don't let them dolt? * * P ****** 


to correct me if I’m wrong - 


FdS^^?^iil° n t ? mk i t,S a , question ~ and anybody up here is invited 

1 don t think its a question of not letting them do it, 1 think Carnivore's * n <k 

where the Internet service nrovider ic imiMstn • < Jr s tise is limited to those situations 

FBI requires, puSSo Crfc P * *' m,nIm,zed com-ordered tofora.a.ion lhat th 

KERR: And let me amplify on that a little bit. 


SitSSefyfas£ dmS 5S ’ Wi!1 aIWayS Si!0W the fatemet sm ' ice Provider to do it if they can, 


in fact. 


T a , c roally challenged ~ now talking about who tile ISP 
the ISP Pied to work with their own tool, it was not effective it was not o»nti»rm« -it „#•*(, ,, V 

was only capturing incoming and not outgoing addresses. It wasn't giving the whole info^^fokT r! -* 
that case, the FBI was forced to use the Carnivore tool. 8 8 ole information. And in 


was *•- and that one instance 


I? a 4n* n ^t ^ irat & 1 ®* ^*e first line is to let the Internet service orovider do it „ 0 a a - r 

he FBI 1 believe would like the Internet service providers to do it if they can y n. And, m fact. 


HYDE: Fine. Thank you very much. I have no more questions. 
I m through, Mr. Chairman, 

CANADY: The gentleman from Michigan’s recognized. 
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CONYERS: Thank you very much. 


I think one of the basic questions here is to determine whether or not you’re minimizing your activities or 
whether you're maximizing them. And of course, it's already been asserted that you're minimizing them. 
And my job is to find out, maybe before the hearing ends but certainly after the hearing, whether that is 
correct. 


And it seems to me that this system that we're oversighting today, unlike other trap-and-trace devices, or 
the others'that we use, is available for — is subject to the maximization of information, getting more 
information than is required or is authorized by a court order. And so that’s the area that, to me, is verv, 
very unclear as of now. 


Tm not sure how we’re going to sort this out, but 1 think we have witnesses here that are going to come 
forward later on that are going to complain about the fact that there was other information that was 
available through this system that might not have been available if we weren't going through the Internet. 


CONYERS: Isn't that possible, that you can get more information, you can look at other things that would 
not have otherwise been available? 


KERR: One of the points, Mr. Conyers, that I was taking some time with was to try to make it clear that 
the only information we can capture is, in fact, that specified in the court order. And to go outside of the 
court order, in fact, is a federal felony with substantial sanctions for those who would do so. 


We, in fact, think of this as a tool that's designed explicitly to meet the requirement of the court order. We 
don't have the authority, nor are our people allowed the opportunity, to step outside of those bounds. 


CONYERS: Well, right, that’s the law. But, I mean, that's the problem. 1 mean, if! could be assured that 
everybody wouldn’t do the wrong thing because there was a statute making it criminal, that would reduce 
a lot of our efforts. And even law enforcement people, I hasten to add. 


Mr. DiGregory? 


DIGREGORY: Mr, Conyers, as I understand the way the system operates - and certainly, that’s correct, 
that’s what the jaw is. But them are checks and balances with respect to Carnivore which would make it 
extremely difficult for someone to counter those checks and balances and violate the court order. 


It’s not just a situation where, as I understand it, a rogue FBI agent, for example, could broaden the 
coverage of tire Carnivore intercept and violate the court order. In order to do that, he wou ld need to 
engage the aid of technical people, perhaps even technical people at the Internet service provider, and he 
w f ould also have to fmd some way to cover up or change the audit trail that is left by the system so that it 
doesn't expose his going beyond the court order. 


And, again. I'll stand corrected by those who are more expert in the way tills system functions, but that’s 
how I understand it. And although, yes, that’s the law, there are checks and balances which would make it 
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three 




my question that you've^v^me lmow°thitr £ ^ at die -technological part of the response 

agencies, JP - *^ WveWn 

hardly anything new about that. ’ * * g be> ond the sco f e of the!r responsibility. There" 


to 

many 


OK, it s the government. And that’s what I'm not sure. " 8 U * eS e ^ bod} ' beheve that it r 


GRAHAM: Will the gentleman yield? 
CONYERS: Of course. 


a gentleman raises a valid point, but I think that that has already been addressed to 

LTo? e'pSs So* t0 h3V ?i hiS Sy$tem ***** by SdepSm ° 

representatives of the'todependent body^^^t^^ould come^ere to^h^r 1 W^imate^ 
that we might have of them, based on their independent Congress and answer questions 


review. 


h%y/webJexk*nexl $.cair^4r^ 
extremely difficult for someone to violate the court order. 

law *» "fa»p law. 

prosecute particularly law enfoLment *“ andwoukf 

tel JtoSlre^ions. ^ ^ m *” the COatext ofthese kMs of intercept s, but in the context of 

CONYERS: So our assurances are that, first of all there's a law loaino it «,n,vk 
prosecute your own people were they to violate if and that there are other technnlnoi<^ U ^ aSSlduo . us y 
make it very difficult to do anyway. There’s a bJfiSSS^JSS S &at 
information than you want. Is that the way I understand that ft cJSSS £S g S 

Ihat which is part of t”order doing ti p"** *t° col, f ct . and recorf 

and with an appropriate cEof cSy “geTSt"* “ ‘ S ' aW by the ^ who issMd « d « 
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CANADY: Would the gentleman yield from questioning? 

CONYERS: Well, yes. 

reyiewed this systeL b ? dyofex P erts 

could change at any time after that. And how wood you maintain * do ; et c ® tera > that 

Jllhnuted after they had investigated, unless "» 


w 1 !: I I! i f 3 I s : c . hairman C 8152 ^ mere| y *> 


it began to take on a life of its own that led to this hearing 


about it in the scope of things, and 


k£.!?T anx *°? s t0 b f ar the non-government witnesses to see how their «nrff»rcfs,«fti nfI „r , 
been happening and - with this system comports with what weVebeXS what has 

anyway; that s what your job is about, that’s what you're supposed to do d ‘ B * 1 thk the w,tnesses » 


Thank you, Mr. Chairman. 


CANADY: Thank you, Mr. Con vers. 


Hie gentleman from Arkansas, Mr. Hutchins 
HUTCHINSON: Thank you, Mr. Chairman. 


son, is now recognised for five minutes* 


audit. I think c J) des t0 m independent review and 

purposes of reviewing it and s^^aUt Por 

Caniivore^Dr Km? ^ *** ,f ^ *° a!3owhlfi °P en access {0 the source code that make up 

up to do verification and vaHdat^^^ to a group set 

is> off-the-shelf software, and its 

under the license that we've mid for ° PCd **’ We re not at hbert >' t0 divulge their source code 


HUTCHINSON; So you would be open, though, and it would 


ftof compromise legitimate law 
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S£^2“4^#/toa* ”* a °° eoi ”® rcview ,ysttm of ‘ he source coii ' s for o»x» 


ore or any 


^iew it ea<* ttafvnn SfST” 7 C ' d tav ' “' “*? e P 0 ” 1 is . you know, when is enough enough’ Do you 
"mml S&TifcSr ttMt <te\wo**ie. Do you do i, 4« ofT 
may be survaltace beyond amply countutg the occasions when it's in «£? net 

HUTCHINSON; Tliank you, 

NoWj let tne — if you have a content court order to use the CVrnivArA evet/»m # * 

show probable cause, you’ve got to get vour court order Rot at tw ’ tfaeo * f “ u f se > >' ou have to 

information reviewed by Carnivore? ' But “ that P ° mt ’ !S inB0Cent «-party 

KERR: If we have, in feet, gotten proper information on the target addresses and the "tn f ™ m » w , 

which we were aSifeSo act^ recorded something to 

telephone wiretap. we womanavt to minimize that just as we would on a normal 


thSSS f 1 [a ,“? f r as * pi P e “ whkh Carnivore looks 

mrougn me type to seize that which is the subject of the court order. 


cs at all the data 


going 


KERR: Right. In fact, one of the... 


HUTCHINSON: Is that pretty much... 


KERR ; Yes, one of our,, 


HUTCHINSON: The question... 

KERR: ... problems is that the pipes are too big for us to do that and we relv on th* . . , 

give us just part of the traffic coming through their big pipe. y h Serv,ce ? rovjders to 

HUTCHINSON: And Fve learned on computers that sometimes delete does not mean d e w th*t 
information continues to be stored. And so my question is* Is the info^Sn i 

to fee court order, is it ever retrievable in any form by any means'' * P * d pUfSU£mt 


KERR: No, it's not, because it’s all in random 
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power goes off, we will lose everything m that memory. None of it gets to the... 
HUTCHINSON: What if the power doesn't go off? 


KERR: Well, none of it gets to a stable recording medium like magnetic media in a hard drive or a ZIP 
drive, a floppy disk. Only that which we're authorized and which the filter is set up for gets to that 
permanent media. 


HUTCHINSON: Now, you indicated feat year to date Carnivore's been used 16 times, I believe 20 times 
in all total How many of these - of course, these are the ones feat's used the Carnivore, is feat correct? 
But you also, in addition to that, use court-ordered wiretaps or pen registers to retrieve Internet 
information by using ISP capabilities. 


KERR: In some of the cases, we've, in fact, been able to ask the ISP and they have provided us the 
information* 


HUTCHINSON: Pm trying to get a contrast. The 16 that you mentioned, were these not by using ISP 
capabilities? This 5s when the FBI went in and used the Carnivore system; is that correct? 


KERR: That's correct. 


HUTCHINSON: All right. So I’m trying to get an idea how many others are out there that were used by 
ISP capabilities. 


KERR: I don't have fee number with me. We could certainly provide feat to you. 


HUTCHINSON: Does anyone know that? I mean. I'm trying to figure out if we're looking at 100 others 
versus 16. 


PAINTER: My understanding for the Title HI intercepts is that it is not a large number. Trap-and-trace, it 
might be a little larger. We can try to obtain those... 


(CROSSTALK) 


PAINTER: ... Dr. Ken's indicated — provide it to the committee. 


CANADY: The gentleman’s time's expired. Die gentleman will have three additional minutes. 


HUTCHINSON: Thank you. 

1 mean, it just strikes me that -- 1 mean, considering the number of Title III wiretaps of telephone 
communications, I mean, that’s much greater than the 16 or what you've used by ISP. And I guess what 
I'm leading to is feat it looks like, if the bad guys are moving as the whole population is moving to data 
communications through fee Internet, looks like we’re missing a whole lot here, that we're really only on 


Sof76 


5/24/82 Release * Pige 72 




»** a*V&n 




LEXJS®-NEXIS® 


h^/webJ^s-ncxjs,con^.u>4V ^i5=>Gbc005a45 1 79276f6fi^?207jfa. 


the surface of what we might need to b e doing. 


oft maUfc«Spi SCUS!i ” 8 “ "* P ° i " t C “ r " iVOr<! has ’ ta f «- 


“molSow J 0i ”!'" S 0Ut ’ ' h< ? e ' s a , of ' olher ,ra * c 0,1 Ibe "« work - We continue to work 

to try to see how we could develop appropriate and lawful tools to go after that traffic as well 

It would tend again to try to use the properties of fee network itself; the need for me to be able to move 
GRAHAM: Would the gentleman yield? 


HUTCHINSON: Yes, fd be happy to yield. 


S^Sng^Hf mUtS' c-Ldlf ^ ab0llt if il ' S not e ’ maiL W >“ "»K» 


E2SSf use other protocols, for example, to move large files, to move imagery, to move 
iarger quantities of data. And A wouldn t mo ve as e-mail m the sense that weVe been Mkmo /hrmt k 

SS* >' ou '. sub i ect ." whatever. It might just move as a block of data. It 


01 m fact > ^formation that companies are moving from one location to another. 


HUTCHINSON; Have you ever had a 
court order? 


an occasion to try to retrieve any of that information pursuant i 


fef o ^ : fl ^ h i« V tr 0t h f 1 any $ 5 **®?° tbat rm aware of where we’ve tried to intercept that kind of 
probably be pic t0 ^ * "* S ° mepkcC 8 “ d We would 

35 ^ 

* ed M & 

But this is still a concern. I guess that even the "to" with fee address, sometimes a descriptive term ~ do 

“ h K Ve > - 0li ’ m fact ’ fr ° m >' our hlstor y of the 16 instances that Carnivore’s been used Syear 

^ h^i m - 5 ? that you beHeved y°« needed pLuW 

minimize!? * ?yP capture, that you believed might go into fee content area and therefore you had to 


CANADY: The gentleman — the gentleman.. 
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HUTCHINSON: I’ll just finish this and then HI be done. 

CANADY: Yes. Hie gentleman's time is expired. The gentleman will have one additional 


minute. 


KERR: I'll reserve the opportunity to answer carefully after review, but there are none to my knowledge. 

HUTCHINSON: So in other words, you're saying the system's working. You're not caeturine content 
information beyond that which is intended undefthe court order. capturing content 


minutes. 


KERR: That's correct. 


HUTCHINSON: Thank you, gentlemen. I yield back. 

CANADY: Thank you, Mr. Hutchinson. 

The gentleman from New York, Mr, Nadier, is recognized for five 
NADLER: Thank you, Mr, Chairman. 


foehearkg. lf ^ m question that may be re P e{isive S!nce , because of a plane delay, I arrived late i 

tnl un<bsrstand ll ’ Carnivore can be used either for content or for, in effect, a trap-and-trace ins! to 
know who an e-mail — who a person is communicating with; is that true? * ^ 

KERR; Yes, that's correct 

NADLER: So it can be used for cither purpose? 

KERR: Yes* 

NADLER: Or both. 

And whether it's used for either purpose depends on the nature of the court order 


KERR: That's also correct. 


NADLER: And it can be set either ' 
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KJERR: It s, in fact, set specifically to meet the terms of the court order. 

“K^tag?^ 1 tra P-“ !| - ,ra “ y°“ 10 ta0 "' «*» *»«>* is talking to; 

*' ,rap - Md - ,raCe mi “**• «« >» »<■ from 

N 5* no ’ IS d P 3St te ® se? You get a court order, we want to know who this guv talked to in the 

last two months or we want to know who he's talking to in the next two months? 

KERR: It's prospective. 


6fa477 



. lalkrng to and sometimes what’s being said if it's, if they’re both prospective? 
KERR; I'll let ray colleague lead with that one please. 


vISS??SX : ^ depead v ¥ p ? n nature of the information that you have available to you at the time 

order to estahlkblhfn 11 ^ S Poimat,on at tbe time $bat y° u se£ k the pen-register or the trap- and-trace 
order to establish the probable cause necessary to seek the order ** the Title 01 order for the < 


! content. 


Sp^and^ace? ^° U baVC enou ^ 10 ” you need a ^ esser standard of probable cause to get ; 


n0t S pr j 3 k 3b ! e caus ® standard at ali > il *s simply a certification to the court by the 
Seh the of!!£ ~nT d he 2W e f°/ cement 3 | enc >' that the information that will be obtamed 

crimlai fovestigat on Pgf 3 the {rap ' and * lrace ~ or the irap-and-trace is relevant to an ongoing 


N ADLER: With no probable cause? 

DIGREOORY: With no probable cause, 

NADLER: So you can get it on anybody with no probable cause? 


SSdlfS EES { fi 0int OUt t0 you M i m ~ that the Supreme Court held, in 

' s * braith, I believe, ra 1 979, that there was no reasonable expectation of orivaev in numbers 

S0 K- e ° ne tums over ^ formation to a third party like the 
ave e hef a subjec{ive or 411 ob i ective reasonable expectation of 
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wifeout any probable cause, who is sending me mail or whom I’m sending mail to? 
DIGREGORY: We do mail covers all the time, which essentially do that, 
NADLER; Without probable cause? 


DIGREGORY: That's right, 

NADLER: Thai's very interesting. 

Let me ask you a different question. 

cofuSdSm T {hh & %*. Sadler? The authority under which 

® ^ ntted States Code, I believe tt s 3 1 -25 (oh) with resnecf ia th* r>^n ... 


Ae/ti . , auilluni > unaer wmcti we operate is 
25 (ph) with respect to the pen - or 31-23 (ph). 


NADLER: Thirty -one-twenty,.. 


DIGREGORY: Twenty-one ~ 31-2 1 at sect, which includes 23, 25, 1 believe. 

NADLER: OK. Now, let me ask you a different question. You installed - vou started 

Carnivore system about two years ago. and no one ever bothered tdtmn r u usa ^ b “* ,s . 

out about it because Earthlink complained about it! d * 8 C gress afaout lt; we J ust found 


^ .telling Co ?gress ta u» sens. of all of Congrm. There 
mcmoers ana staff briefed on it over the last year. It’s been widely... 


certainly have 


NADLER: Judiciary Committee staff? 


KERR: Excuse me? 


NADLER: Judiciary Committee staff? 

SoSSS^ 

Department of Justice, including at the training center in rnwEj c J |? nefed WltillQ 

a«on,c, s and AUSAs 8 o feeing. &5S££ 
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° 1116 0ffice f fEnforcement Operations in the Department of Justice where it's m fact 
reviewed pnorto ever going to a court to get a court order. So there’s a very substantial level of rev, ’ 


internal to the FBL mtemaito the deoartmenf ZZluZli T " a or review 

order is issued me oepartment, as well as the subsequent review of the court before an 


order is issued. 


N ADLER: Subsequent review to the court? I'm sorry'. 


i think I pked, once you have Carnivore on-line, what institutional safeguards do we have that 
misused? 00 gathered hy Carnivorc » presumably afier the court issues an order to install it, is not 


CANADY: Die gentleman's time has expired. Die gentleman will have three additional minutes. 
NADLER: Drank you. 


ttat '5 at ' 5“ ic “!t rt >' “ a M| - atom intercept, that the infonnalion we 
iSlSlnwSfhe’orE W SMl ^ lhC “ m ' Whi£l ’ C “ <ha. weVe 


NADLER: It's provided back under seal to the court ? 
KERR: Correct. 



NADLER: Is there a proceeding in the court? 
KERR: i don't know. 


iook^aUt" * me2n> ^ tbere 8 not 8 P roceed > n B in Ibe court, it'll simply be placed in storage, no one will 

PAINTER. That s not completely true, because it's placed under seal with the court In tb#* T'lti.a nt , 
intercept And then at some time in the future, the court can, under S nr mX^hTt ava^^^ 
instance, the person whose conversations were intercepted and/or his defense counsel. ’ 


hSrcemedorS'm^r^? r * f . # ?ff\ has be f the sub ject of such an order and his content has been 
imerceptea or simply — or simply that whoever he was bw tn iL „ rMr» * 



* that his pri vacy was so violated? 


o^SteiSj»^r“^r ViSi r f ri, h ® - ifa Title 111 «*r is fciied bv (he judge 

«,w“ ^?!!!?L 8 r er 8 cuta . in P enod oftLme ** * believe it's 90 days - there has to be notice to the people 


~ * tuuv - Jt uwiitvc yv Uet¥i> mere nES to h& RAf ap t 

versatI0ns were intercepted. I think that's been done very broadly, as I understand it. 
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S^ L Sv»Sj'oi B® co " venatio » s w « i»<«epted or whose — or on whose 


e-mail there was a 


PAINTER: Unto rhe provisions of Title III, when you're dealing with content, yes, that's coned, 
^rf5a«o Wh “ ab ° U< **“ yoa ' a not dealto « »*> «”<«*. «*'" .volte dealing with a 

^S : mp^ a itacea?Mw?OTob,Hf L Sl, °“' d et "P hasi . ze |OtneUtfas that Mr, DiQregory said 

(CROSSTALK) 

don^anSg^wo™ bU ^uf S “ P r 9 taM P. «“* <° <*«'ve that IVe committed a 

to by e-mail or for that matter*’™ E5 £” y0 “ hav ? foll » wcl ? «*» tm talking 


privacy was violated in that way? Do l ever know fbout IS g <t°y°- ever tell me that my 

Hin ! < * on , t bebeve tbat tbere 55 any requirement for disclosure in the law And I would nnJv 

Wtha tr priV3C >: was ***** and only relyingi^jon the case * " 
to make 'Jb^S^SS^ ******* of privacy in such infortnalon I just wanted 

I IS t S f ' P T e f QUrt ' S P ° int ofview > th2t here’s no reasonable 
rttioiri th , 01 pnvat >’ bu ! 1 tbuiJv as a practical matter, most people would be somewhnf mwt ;c 


to know, Ithink I should know StatThat And 3aS“,T ' di<ta '‘ w “ P“P te 
basis did you do this? Did vou have mv mmn t a ]!« be , ab 5 to t0 tbe government, On what 

right now, there's no provision forthS* *° d ° it? And maybe thc - v did and maybe they didn't. But 

PAINTER: Well, that they *- first of all, the prosecutor has to certify to the court that u ;* -»!«»» ♦ , 

NADLER: What period is it limited to? 

PAINTER: ... is 60 days. 

NADLER: Can it he renewed? 
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PAINTER: It can be renewed, but it has to go back to court. 

NADLER: How often can it be renewed? 

PAINTER: I'm not sure there is a limitation. 

NADLER: What's the longest anyone has ever been subject to this? 
PAINTER: We'd have to look into that to be sure. 

NADLER: Has anyone ever been subject for more than, let's say, a year? 


PAINTER: Again, I don't have that information available at this 
NADLER: Five years? Could you rule that out? 


point. 


If n do alffl'S T ,0 P 1 " 0 S‘ ,he ,0 "8 esl «»» «ta anybody las eve 
J HM, we can try to do that. I don t know if we have those records, but we can try to do that. 


NADLER: Thank you, Mr, Chairman. 

CANADY : Thank you. 

The gentleman from Alabama is recognized for five minutes. 


BACHUS: Thank you. 


Die potential for abuse here is tremendous. Would you all agree? 

PARKINSON: Congressman, I guess I don't agree with that, 

BACHUS: All right. And you don't have to give an explanation. 

PARKINSON: Well, I think at a certain point in time we have to relv nn 

who are - who have a number of cherk/3VTik„ ,1 - I y 013 the S ood With of pubhc servants 
ne nav e a number ot checks and balances m case they get try to get away with something. 

BACHUS: 1 think you're exactly right. I think what you’re saying is, trust us. You have to rely on us. 
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reij m S - a ymMn^^^vilaT&^ CmSe 1 lhW! ?°“' re “ aclly ri * ht - 1 «** you have to 
to analyze .11 the phone calls that come ttaios^WyMetV in°>“u? T&T " d **• ' Wre «»*»* 

KERR; That's correct We can’t do that, 

BACHUS: But you can do that with this - with Carnivore, with.,. 

KERR: No, we, in fact, specifically don't do that. We only.,. 

through that Monnation^rMtMon? you? ** ” ° f >OU d ° have the abi?lty t0 anal >' ze everything coming 
KERR: No. We, in fact, restrict what we... 

BACHUS: Now, you restrict it. But you have the ability to monitor... 

Sfa&Slf 1 ^ d °°‘ t ^ • mm Wilh the 10 *> <•* «Mtae processing of that 

V 

system. I mean! ym dSXha™ ^ whateveryou want on thal 
KERR: We don't have the right nor the ability to just go fishing. 

BACHUS: Well, you have tire ability to monitor anything within that information stream. 

KERR: No, we, in fact, have the lawful opportunity to... 

(CROSSTALK) 

BACHUS; No, I said you have the ability... 

KERR; ... some vety specific information.., 

haw teLta’o"ogy to Si '5£ if taVC le8al abili,y - B “ you 
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KERR: We are not sitting looking at the information stream and 
m place with a court order. It's not intended.. . 


moving our filter around. It’s, in fact, put 


v™™£^ Ut Z? U h n Ve /2 e technoI °8y to go in and monitor every one of those e-mails on the system if 
there! * 1 °* N 3 ° f them at once * but >' ou could J ust ~ you could monitor here, you could monitor f 

KERR: Certainly, if you had access to the system, in principle, you could do that. 

BACHUS: Which you do — and you can’t with telephone calls. 


you “ e fa ,he tti ' pht, " e sys " m and »f» *w«ch 

BACKUS: So, you... 

wdUand so If ton thin8 ' Remember > ^ j»8 t elephone switches are simply computers 

weii, and so u >ou got into one, you presumably could see a lot of traffic. * 3 ‘ 

BACHUS: OK. 

KERR: The fact i$ that there are a lot of bars to our doing that, starting with the law. 

BACHUS: Safeguards. They're safeguards. 

KERR: What? 

BACHUS: They're safeguards. They’re safeguards. 

KERR: It's tire law. It's illegal to do that 

BACHUS: The law. OK. I mean, it's the law. That’s one of the checks and balances and safeguards. 
KERR: Correct. 

BACHUS: Now, one of those was, you said, the Justice Department. You have to go to the Justice 

Department for -and notify them and get their approval. go to the Justice 

S ^ tha ‘ “ “ k ' S * Weter 1<Ml of aulhori,i ' s th « £ 1» approval for yoor activities; is that 


you’re 
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KI2RR. What Mr, Parkirisoii was saying is that for the trap-and- trace and pen-register which rmfv *ti 

addressing information, ifs a different level of review but to get content *vW ^ht ki h y ® Uows 
be demonstrated,.. w Dul *° content w here probable cause needs to 

BACKUS: V on have to go higher up. 

™ R: its ^ f3Ct ‘ takeS higWevcI spproval in the Justice Department before we are ever able to go to the 


BACHUS. Well, let me ask you this: Why did Janet Reno not know about this although it 1 
three years, and she is, in fact, the attorney general? ’ al&ough 1{ 


s going on for 


KERR: Well, I would remind you that the Department of Justice is some 127,000 people... 


BACHUS: OK. 


KERR: ... and multiple investigations. 


have! mS: N °’ 1 thlnk “ 1 tha, ’ S a valid poim ‘ There are 527,000 people over there, and we might 

(CROSSTALK) 

DIGREGORY: ... to ensure that we're balancing privaej' and law enforcement needs «nrt t rutnt- *u ,< 
what’s going to happen with respect to this independent nteds ’ and 1 ihmk {hst s 

BACHUS: So she didn’t about the... 

DIGREGORY: ... verification and validation. 

CotSs S aS°stid b t?S fh?v °T m f ? s f ad H that **» National Security Council testified before 
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htlp://w'ebJexis-nexis.coTRyte.uni . . ..,’d5=Obcf305a45 1 7927<5f6fae72f57 


SSw^folemem ^T^&f a rt°f 8m$ *"*« from tim t to ji me * share information 

r«o,^!f - ni D 1 , e r ?* U1 fact » some very important hurdles there, including the Classified 

SSEf» Protection Act and others, so that, in fact, the primary purpose of a system may have been 

aboitfcr^ X lhat p ? aaty , purp0Se ’ u ma >' have importanUnformation 

ut a cnme, either committed or being planned, and there are mechanisms to take advantage of that. 

^ ge “ lta “ an ’ s time is Without objection, the gentleman will have three additional 


'*"* m ° ni " " they moni,or 3,1 «*. at] e-mails, all 


PARKINSON; I think we should defer to the National Security Agency to talk oreciselv about bVh^ior, i 
don't think we're prepared to talk about it today. } precisei) about Echelon. I 

BACHUS: I guess I would just ask the FBI. They do share - you say they ~ when he said thev muting 
s ared mformation with law enforcement agencies, do they share information with the FBI? * 

W l have ’ as y 2 u F obab3 y know > a very significant national security responsibility in 
Iax y enforcement So it not uncommon at all for foe National Security Agency to selectively 

5ss Ts," * may acquire - 801 ii d »« «• - *• K- pdAisrafgffis 


teSSial SnCcnnSnl Iff 1 poi S l * M ,ite '? us . e ,te « “y r “>"l qoeako. and .haft - you ay 

me rsationat security Council. I think we all presume they re dealing with national security Rut < 1 -,--.;, 
gam mformation on another subject. I mean, if it's national security, obviousNfoey could ^ share it Stf ^ 

Sme® f itf * S3y ^ SUbjeCl ° r lefsjust Sa >’ that we ' re taring about^X *£! it 


DIGREGORY: Carnivore. 


vou^Sibif^* tS?‘ K th . e examples y° u 8 ave us were about espionage or terrorism But do 
j.ou use tlu^ sa>, m antitrust investigation? Would you use it in income tax evasion cases' 7 Can it he »« 
m, say, OSHA investigations, or EPA violations? Xie there any restrictioS there? ^ b $ 


Pti^yAct^ ° fC ° UrSe ’ haVC t0 be a fedmI felooy to come «nder Electronic Communications 


BACHUS: And all those are ... 


2rrities d k W0UM haVe t0 be ’ in factj one of tbe predicate offenses under Title III 


to come under those 


So, no, it's not every offense. Clearly Internet fraud would be an appropriate taroet Chitrf mranm , n w 
the Internet would be an appropriate target. These are major programs vvifofo the FWfoft wewSdd 
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(CROSSTALK) 


Sto C s“oSs Sf 0ther ** e ‘ Tnai! ’ can yOU set * mo files? Can yo » " do you have the ability 


to get 


oJhZ*?’ H® * f ff ‘? tp J r ? oco1 ~ ffle '™ fCT 

protocol that's “tog SployS °” ly ®“ “ wha ‘ "* hav * *' addresses <* «>«” the 

»m‘S!2bS y ° U ha '" ! *"“ a " d <b ' pa$!words ’ >-° u “OM “"»% *et into maybe a mainframe , 

S «^“&"Sr,hetol fc ““ ° rfCr SayS ' ' l ' S " * " ,,,er ° f S0! ”8 aad <»>»* 


WATT: Will the gentleman yield for a second? 

been {ransmitted? If J«a had the address, would you - 

or look at the nnmkJ^ ? and “ £h f c fPf CIty to go m and either look at the content of a pnor e-mail 
or look at the number or instances m winch there has been communication to deliver that eiK 

CANADY: 7116 gentleman's time has expired. The gentleman will have one additional minute. 
BACHUS: Thank you. 


Let me - after he answers it, may I have 


my minute then? 


KERR, Shall I try to answer Mr. Watt's question? 

BACHUS: Answer his, yes, 

Seadv heen'Snf^n?'' 0 ** 6 S { Stera basical5 >' deals with message traffic on the fly. If the messages have 
already been sent and received, another way we, for example, might get it would be if for 7v S« « 

DIQREGORY; And under certain circumstances, stored communication c <h»f s™ u»ia , j 

communications held by ISPs can be obtained by simh w ™ntTS " 8,orcd £ - raa ' 1 
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BACHUS: All right. Here’s my final minute. You mentioned.,. 

CANADY: Hie gentleman will have one additional minute, 

?! Jk!. rr ; ent 1 i ? ned i udida5 oversight. And, Dr. Keir, you mentioned that you've got the defense 
attorney arid he s looking over our shoulders; you have the judge, he’s looking over our shoulders aTa 

fZT y ictaix has abili,y “> hfmA 

f 

^ l hffarf°a y °% s? y 311 lb f se 03365 are on S oin g criminal cases in court where there 

is, m tact, a defense attorney? Or could it be - what about a case of an investigation where fhlZ>cZV 
attorney or not active court case? investigation wnere them s no 

KERR: I tliinlc Mr. DiGregory pointed... 

BACHUS: Or can it be used in those cases? 

2;^ Provisions of Title HI that would lead to judicial notice of those who had been 
intercepted. They certainly, at that 60- or 90-dav point, having been informed that thplr 
^^rnmrcephsd would take a great interest, Wh W 

is onented very well to protect their privacy and rights. * me s> stem 

BACHUS. Are you unable to take information you gain from these investigations and nass them nn tn 
other law enforcement agencies about unrelated investigations? Or is that information off limhS 

? C S en?i f ma n'stime has expired. The gentleman's had more 
, naa an 3 ,one eJse * We re gorng to go to — we have a limited amount of time The ntemhm A ftu- 

Lwe?to?aw his £?“ qUeStl0n about other thin % s the gentleman might want to ask, but Mr. Barr's 
So Mr. Barr Is recognized, 

BARR: Thank you, Mr. Chairman. 

SfAllr^&P ite / aScinatks ^ Th ? Cli ? ton administration is fascinating. It never ceases to amaze me. 
Committee, we’ve been E*g a series 6 ofheari^ Srffabtof 0011 
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tiwrelm «S5fSS S Title'xVTH fn ! d<? because tbere h a privacy act or simply because 

mere are sanctions in Title XVffl for misuse of the Title III provisions does not guarantee that Lw! - 

this or any other administration will abuse it. So I think we realiv need a little bi? more than simnt Svin 
that there are provisions in the code. " n re inan SW1 W saying 

h h di e s hfL^L r rin re ’ f? 1 pr fl ems > but l he fact of < the matter is Carnivore is not 
a ^e a basket and these e-mails just sort of drop into it It is vew m^b 

oria to puU « Jta *! IS™** ' mbma “ m ” ,W ^ *£» i» 

SS 

diffenS te™!^!,h» t& V r ,IV ' anll - , “ c ' ® d r® re 8 ia ® JO“'" **>* »hing v«y 

ordel Wanted an i P f n St f* %vitb phone ^bers, as you all have testified, you get an 

from a cfurt , ^nSSt d if 13 5y !ower than a TltIe m ««i we understand that ~ you get that 
trom a court - a court has to grant it, there’s no discretion for the court - and the telenhon* 
it were, has to comply with it Thev can't *av ,i 1P „ • , , ana me leiepnone company, as 

, * , “ / „ , u * cant sa} -- tney can tiust, you know, give you the hloh-hnt snA «« 

W e re not going to do, they have to comply with it. And vn» tot! a™ JuJ IL. ® 5 5 at . . S A V > 


under the statute to do that. re doing something ve^, w^^^rcnt h^e! 38031156 ^ re ^ ubre< ^ 

Wiat you’re doing here is, you’re going to that ISP provider, which stands in the shoes of the irsdit.v™! 
phone company when you’re looking at a traditional hard number trap-and-trace or oen reo Jer tnd 

mfonnSn 8 We dS sa . tlsfied ^ hat tbc statu U says that you have to install this and give us^ihe 
SIS • f y i* U - 1 dont kno . w wh y y° u ’ y° u ^OW, what your rationale is but vou’re 

force iJolnow g f d ° “*£*" g - 0mg t0 §0 outside of the Iaw here, basically, and weVe going to 
torce you to allow us to put our software into your system. You will not be able to monifnr it TVs & *° 

siw a UP / m m*i and U t re th£n 8 ° ing t0 ta ^ e i{ from lhere - ^nk you very much guys* you lust 

give us access and we ll do our thins That's v«v ri;fW.nt , J \ * *•««»« guj s, >ou just 

work under the teditionalCh^Ss schme h " *** {r8 P’ and - trace «* pen registers 

Also - 1 think also, there is new legal ground that you all are Irvine to break here and , { 

large quantWea of infonJL STpuSe?ooS fZ^mt ^ “ 8 ° " 8 " d ' SOrt 0f ' harv «' 

I think those arc two very, very large steps that we're taking here, i don't think this has been i j 

out. And thaf s two areas that I have concent about. Why is it not ancient 

tesfimonv. as we ac % nnmW „ 1 , Vi r iU because we nave both 


much ~ in A o ^ 2r 7 ZT V\ y - * inm & imi carnivore does, but do it in a 

a y ***** ls mmh more Protective ot the privacy of the Internet service provider users, 

s“S4SS a ^ wre no * ca P able df d ™8 ” d t *>"' think that's the case, ten you could reS 
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^Tiy is it, m both of these areas, you're trying to break new legal ground? 

o£S SL te tha ‘ y0U d0 "'' ,Ute ab0 “ ( ,he “ isti ” s Matott *>>« youta willing to 

r —* — **« «« 

/ p C0U1£S not provide the formation, and Dr. Kerr can talk about this as well, 
of them saying, Weil, we have to comply with a court order Thfv * ,J’ lt " asat J us * s matter 

»<! the court orferSL ' ha ‘ W ““ Se ' 1 " *“ "‘ ted ^ K« coon 

33A.RR: And that was not the Earthlink case? 


PAINTER: Again, since that was 
service provider... 


an ongoing criminal case, I don't want to mention who the Internet 


reported in the newspaperf^ And* I !,^ a ? llIud£ cas £ because ^at's been 

case. 8reat GarK secref * A»o 1 *»* you are describing the Earthlink 

pnweel^ proceeding, there is a court order in that 

were argued at the hearing, but l don't want to mSfe ** pub!ic facts that 

BARR: 1 thought you said at the beginning it wasn’t the Earthlink case. 

PAINTER: i did not say that, f said 1 don't want to... . . ... , .. 

(CROSSTALK) 

BARR: I think it is. 

PAINTER: But in fact... 


'•3 of 76 


(LAUGHTER) 
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‘ r "" ' " ' ' N "*" , ^*if(t*j£Urt(jr^u-4iji*»S»wka^, 1# * N , *. . • , . -/'-■, ‘ : i ■; :'.'i ‘ \ ", 

. ..^.. ..... » ,. v .-- ■>>.+*.<.***.'* -,* V/iik 'sY 

S^NEJOS® Q k*+>. // 1. 1 • ^ 

nttp://webJex^^ 79276f6fe e 72f5? 

that effect tliat was presented to the court in the form of affida vits... 

(CROSSTALK) 

BARR; But that’s very different from tire testimony that we’ve had from Earthlink. 

prff!S « ,Vs G **$*y the policy, as I understand, at the FBI and the 

fashion, that’s what they^ prefer. It raise^thS of ** mform * tion and do a <My 

SSf*" timC baS expired * Without °bjection, the gentleman will have three 
BARR: 71} auk you. 


lf°} U S 7 ing ’ **?». th , at in cver y one ofthe 25 cases in which Carnivore has been f u A , 
that it has been used is the Internet service nrm-ifW w. *„m ort nas &een USC< L the only reason 

you need? 2 P ° X sder has> to?d > ou the >' cannot provide the information that 


PAINTER: That is my understanding, and I defer to Dr. Kerr to also address that. 

provider can, f mfcmSn to fat f^ et servjc f 

,0nK VMy ,ar8e teOTet P rovid " s “ *« fe K hS.S„l« SlIL 

by bringing in our Carnivore system and employing it ? P ed 10 talce the technical and cost nsk away 

"Please install Carnivore"? I don’t think so. ’ J e ISPs breaking down your door and saying, 
as I undottufd it, Ital^oviSIStority 1 for't beg<JS2Zw a 

SfKR* * f ™- “ d " G « - -eXg yXtitSLou, wha, 

mS^Zt s,™* ^sr* ^ chap,w 2m - «*«• « «■« 

exactly what you want and that’s all that you get § *“* hea fiter 11 out; >' ou teI! somebody 


DIGREGORY: In the case to which - in the case referred to by Mr. Painter 


we successfully relied upon 


tef?<S 
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I the pen-register statute. And know of - and ! stand corrected if someone has a correction to make - and I 

fjjk Know of no other case whers an ISP has challenged our reliance on that statute, 

Sv 

5 BARR: No, but is - what I'm saying is, is there any statute or case law other than this one case that as I 
understand it is stUi m litigation? 

D1GREGORY: And I'm saying we've relied on the pen-register statute successfully in this area... 

■j." 

(CROSSTALK) 

/ 

i BARR: So you ~ the Department of Justice... 

(CROSSTALK) 

D1GREGORY: ... and there have been no other challenges other than the one mentioned by Mr. Painter. 

BARR: The Department of Justice position is that Chapter 206 provides statutory', therefore, also 

^ th0 ?l y ’ 1 ^f 88 . you would ar 8 ue ’ that >' ou had ™ that the government has the authority - 
£ke ££ togeS iS2tfe” Se Ca,eg0 ' 5 ' otmtormatior1 ' far tey™* si ">ply «» >«8«, and then itself 


CANADY: The gentleman's time has expired. Die gentleman will have one additional 


minute. 


PAINTER: I think when you use the term harvest, you're using a term that really doesn't apply here. 
2ow and «« Ste iS' KtU ’ 8, " h 0nly Cap,Urin8 int0m * i0a lhat yo“ 

55 r rder 1 mean > this is S0£t of - tha t’s what I love about the Clinton administration, then 
you get mto this circular argument, it s almost metaphysical. You have to have some wav of going in 
there and finding what you're looking for, otherwise it's a non-sequitur. " 6 h 

“ /Jfa 8^v?«‘SS? M aB “ ,cy here> ^ <0 answer your i***" « irec,ly - w* 

We **? 1SP *° brfn § us tbe smallest of message traffic that would contain 

foe target messages. We then brag it to an interface, where, in fact, a clone of that reduced set is made 
me regular message traffic goes on, unimpeded, to the legitimate recipients of it. We then filter the 
cloned stream ot mformatton and the packets that do not pass our filter, because we're not allowed to 
record them, m fact, vanish at that point. The only tiling that passes our filter are the packets with the 
offfnes addreSSUlg mformati °o t0 meet ^e court order. And I think we’ve demonstrated that a number 


In fact, we appreciated your visit, some months ago, when you saw it. As to. 
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(CROSSTALK) 


BARR: When I saw what? 


you were at Quamico, some of the demonstrations we ga 


gave y ou, were, in fact, of these 


to^iti^CarSvSr 2g °‘ ™ W * S ° S CALEA ‘ 11131 wasiike ’ four « five years ago, that had nothing 


KERR: Well,. 


(CROSSTALK) 

BARR, Well, I hope it didn't, because it wasn't described to me as Carnivore, 

KERR; Hadn't been named yet* perhaps* — 

effect* tteSwJJto onSf ff 3 ®' P ? -? 8 th ? , ? 8h m ISP ' h fact - 10 do H 

ul ,w,= fa fM ' Eive " 

filiS fiL“n“' ” have 10 pr0vid ' ,cctoical assista "“ by P“«fa« our V*m fa Ike BP in order to do that 
CANADA: * gentleman's additional time has expired, 

yotJSSS. Ma SSS^^S'” had 800d p,esen “ tions in 

We will have- additional questions, as I indicated in the outset, and we will do our best ^ ,w„ 

- eC d Ve th8 ^ will S S the^S^A^^ Sk yS foryom tmG 

testimony and your assistance to the committee in this oversight responsibility, ' 1 y r 

And now well move to our second panel. And I would ask that, as peoole are exirinv th*> a „j 

of th? Stas SSsecSd* °panefas fhev a ^ ^ b f C3Use / m 8 t mg t0 P rowed the introduction 

incomers m me second panel as they are coming forward to take their seats. 

mnceS fnr e LT th l S sec0 ” d and fmal P anel of tody's hearing will discuss privacy concerns and 
concerns for network security rai sed by the use of Carni vore. y concerns ana 
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American C^fuberti« P Un1om 1?I ^ Sleinhardt Mr - Steinhardt is the associate director 


: of the 


^tSIoiogy. WC WlH hCar & ° m Mm Davidson > wh0 is the staff counsel for the Center for Democrat 


Following Mr. Davidson, will be Tom Ferrine Mr Perrins i<c » ■ 

Institute for Computer Security. He is aIs^™aV^i?J^ f P n T e * Stl ¥ 0r / or the ^ific 
Computer Center. y We macager of «*unty technologies for the San Diego Sup, 


er 


th ?? ^endme e m, a Ijf HartS 0, V s P^taHzing 
tilts subject previously * Mo SSSSSSlS^ 


Stewart Baker, an attorney at Steptoe and Johnson will then testis Mr n-t. 

telecommunications equipment mamiftrfnrpj-c «„,i . tesIJ v * Mr, Baker represents major 

Assistance for Law Enforcement Act and law enfnrrpm et ? in . connectlcm with the Communications 

gcncmlcotmsclofthcNaX:^ 


Finally, \\s '*dll hear ffom Peter William Sachs Mr Sachs owns tmxrw i it 
provider based in New Haven, Connecticut IC0NN ’ LLC ’ 


a small Internet service 


W ; rs*-* ,ta «* «*» * o your 

statements will be made', par, 

So we will now turn to our first witness of this panel, Mr. Steinhardt. 

STEINHARDT; Thank you, Mr. Chairman. . - 

LPi“oSi^1lLySSStag. ,,,e 0p|,0mmity 10 *«* h “ M ate want to thank yon for so 

bears a great ilofiSj wresOTThty Utm e^iSjaSIStow'fo™”' “” d “ ,ha ' 

hS'top of doraS Car f° re « onprecedented in the 

whtch accesses all the comntunSSS^f a £2L hw installed a device 

communications of the target of a «SSSiS2 ? £ ur cu ® tom f s > ra *er than only the 

that it sliould be granted access to 0I ? eT \ ^ ever before has a law enforcement agency claimed 

granted access to all communications passing through a service provides netJoSased 


*of?£ 
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d °" m unsupcrvised promise that it will not stray beyond the confines of its authority. 

t Carnivore is roughly equivalent -as a number of the members have U’m^ui ■ , 

a wiretap, capable of accessing the conversations of all the phone comnJw’s cntowS equn 'f !em t0 

' Tf 0ffe k r ?i before * when ^ suggested that the to and froiSh tScSh^Snt, 

the key to look for which messages to record the »n*Wv „f . rt.il - "v c V ar , mvor ® box uses as 

post office and stationing an FBI agent there’ looirin « * ’I e ? U!va!ent of going to a 

goes through and then picking out LsevdSh h wkhS t reSS! ™[ 0TI f' im P f eve 2? ktt ^ that 
open up and actually look at the content, shes to record either the addressing information or to 

Now I must $ay ? I want to comment oh one thing in this section *- on** thmc* tu#* i j * 

earher this morning, and that's this audit trail that forthe first time aC^hifilf Su 

M^S mtly we are t0,d records at Ieast what the «**«£ EJ VS2£, ofk^tffif 1 ** 

I think there are probably a number of things that are worth noting about this audit trait *w 

apparently was created only recently, and I would this . 


use in a y ei y limited number of cases, that <* 

Wb0 “ * oto * 

oi the order, not someone who's being prosecuted? P * an innocent third party, not the subject 


ttaUtMnkftlt ‘‘™'' f “PP 0 "™''!' in which to contest 

carefully at all those toails tht „ud,t tool suggests ,s that you need to look vny, very 

t0 imagine how the operation of Carnivore can be scuared eithw «.ritn *+, , tr , , 

ECPA, which was adopted to implement the Fourth Amendmt^ 

the intmsion into Se^ri^c^of^ noSelS^ tar S etedso as to avoid 

not have reasonable cause to betfeve that they are engafed in a cS f Wh ° m 8W enforcement do «s 

!nJ^?£! ,t!0n °f thts> E 9 PA requires the government to specific the person who's the target nf the 
ui\ estigation* ensues under investigation the oarticular 9* 

accessed. They place on the provider of ihe co^unicafions mLi^ 2 ? he C ? k n H nunication 15 10 be 
tho communications of pontons authorized to be teereepS fem! X?SS ££ T °“ 

Carnivore is in fact a nJ5miiS?o! touS SSSST as ?«" “egeMed. 
enrite steam of communications that is teveltag S£“* *° ,he 
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Carnivore? What kite smtute ' ^ai"m ECPA^wiSIn ^ nw'r^-t,' 5 * e s ! atuE ? ry authorisation for 

q “sta tSd chi Mt™"' *“/!""*» taattH CMtere? iSSSS^S^SSST 

Sts 1 5SfcSrstf '&R3g sKz sr t, ,“v ,bou * «teSte&s 

never went higher ten one federal magistrate. “ *“ we talow V “V llttle about «nd that 

%,t 

jsai— 

m < bald crSaTSS'te ofSroll : thte^S'need to Stt^SS^SteifBSB ff?, 8 ' 

mat - the recent history tells us that the FRI ram** k* * j, recent mstoty ot the FBI, which tells us 

claim tet Carnivore is a permissible 1 £* - L re?v SStfStfKS 3E^5ffi& * 

Let me give you -- let me give you some examples. 

£t3S£&r »S±bS±& 

enforcement. ,^oZS,Z ^ 
providers to provide it with new sorvcillante capaWiKS^S toSE 

f ?" s .?5‘ , ly ““^Ji greater capacity and new surveillance features SL Ito M 1 t oJfS’ *! ™ h ?. s 


fcLTSKSf amPle ° f ' “*■ ° ttes “ to ray <«*»»>’• B « I “> “ » example is worth 
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S™* 11 ®!"' "1 th refcrace “> this 
be called tracking information/' p orroats °n “ t0 inquire anything that could properly 

Well, whether or not that was Director Freeh'c inf,w»fm« i on/ v . , , , „. 

1995. And the FBI has fought tooth and nail i \ became the m ' s policy in 

before &6 Federal Communications Commission and now in th^in^r^ 006 L® dustr y. then with ~ 

* CoI °wbia, fought tooth and nail for (he proposition that CjSea H'S ??* of A ?P ea3 f for <1» District of 
operators to provide It with location tracking dntoatiom f ’ d ° eS reqmre the cellular 

hear krimonlTShf yoaVe . fioin « £o 

suggestions of the witnesses that you - that you heard earlier wP yC £ no ! to s,m Pty trust on faith the 
service providers cannot provide £n faftSS^ *’ *“ ***“ haVe bee » «** that other 

know Eh? b ° X VV ° rks >" 0r in !his case, "We 

St’ w te0W *“***« about fn detailed n«^*2hh i S!!? ,1 ^ to * blaCk box " 7112 

seal, because these eases all come up ex parte - these request fi^ord^ 

not prepared to ask you to doSSh ^^* fneSSe “ & ° m * he 8 0v emment were 

explain to all cat1 c ^!ude, because - let me just 

the importance of this in any way, but wedo have aE£ That ’ s not minimizing 

which we are moving to after this. h g 0n a P™? 08 * 1 that Mr. Frank has introduced 


the palr^ ** y ° U CSn reaIly Sta * clo$e to «* «™ minutes, it would be beneficial, giv, 


gi ven the size of 


FRANK: Mr. Chairman? 


CANADY: Yes? 


FRANK: Is it the intention of the chair to adjourn this hearing and go 


to the next one at 4? 
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tei* hSg” ° f th ' Cll * ir ‘° h “ r the Witaesses “ d 10 have °" e rou " d of questions, and J 


FRANK: Thank you. 

STEINHARDT: Well, HI stop there, and allow the rest of the panel to speak, then. 

CANADY: Thartk you* Mr* SteinhardL 
/ 

Mr. Davidson? 

V a .4/ an C a vidson, w&h ^* e Center for Democracy and Technology. Fd like to thank 
the Fourth ° f 


hrmrW A, iV — wv. . otv puoicmaue; ana, second, oecause Carnivore raises 

!™Sfu" the need tor greater privacy protections in our increasingly outdated statutory and 
constitutional framework that governs our surveillance and privacy laws. statutory and 

K ?wl^? * - C firS l lthe ^ estiotvs about Carnivore. I think the threshold question for Carnivore is 
, , Cams ore has access to much more iniormation than ti is legally entitled to collect Hnw rin 

we taw >ta« wo oa .ms. Carnivore? How do we taw wta. kind of SSKSTjS « SrS$ 

SkS eo “f e ' s “« ence > t D’ to give the committee a sense of a little bit of what we’re 

talking about with packets, here. I’ve got a couple of slides that I’d like to put up quickly. 

rfSnYkiwfw 3 cou P ] e of disclaimers. These are captures of actual real packets. And for those who 
do 1 hrmg their opera glasses* these are actually should be in your nacket^ TWvV** th& ^ r n 
to a “<hence - they’re the last three pages of my testimony, ' P ' Y re the “ and for folks 

SaS re f ! P l cketS ? at have b f :i captured from CDTs network with a very crude tool : 

tl£ 7 look ^tog like what Carnivore looks like, but I thought it’d be faeioftdfor 

hardSSdo som! of ffllhln 2*X f^ hat * om « of the things that we’re talking about look Ifltemid how 
Carnivore. ° f th ^ 1,8 {bat Carnivore says it s doing, and how hard it Is, maybe, to trust 


SJ,’ r th \ th ‘ S f K St packet is 3 sampJe e ' toatl message - actually a real e-mail 
“ off of oot nSrk y ’ SUbCOmmmCe COUnse] ’ 0R Frida >' was captured off of our web site 

ScSthafSS hi,” f h I 5 ^ ha i a ?! cket mWsr do ® s to a P 3cket . It, kind of, breaks it up into different 
pieces that can be understood. And there are, sort of, really — sort of two chunks to ttiic mforrr.ati rt T, 

^ t0 /A WhiCh r i0t f peopl ? cali tbe ^ader information, wliich contains a Im of 
me aaoressmg information and description of the packet. The second half of it k wh-*t T oati o,* 
or <hc payload of th* pacta. Aod WLcMcs IheV *0 xtS tf 
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